KEF ID:A56886 


EXTENSION COURSE of the ARMY SECURITY AGENCY 


SUBCOURSE 20-6 

MILITARY CRYPTANALYSIS, PART 1 
MONOALPHABETIC SUBSTITUTION SYSTEMS 



A 


I 

I 


Declassified and approved for release by NSA on □2-05-2014 pursuant to E.O. 13529 



REF ID:A56886 


RESTRICTEP - 

EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
SUBCOURSE 20-6, MILITARY CRYPTANALYSIS, PART I 
MONOALPHABETIC SUBSTITUTION SYSTEMS 

Security Considerations. 

This course and the accompanying text have been classifi e d RESTIIICTED to facilitate 
their dissemination to extension students of the Army Security Reserve. Nevertheless, 
this material is to be safeguarded in the same manno- as CONFIDENTIAL matter, and 
every precaution will be taken to prevent disclosure to unauthorized personnel. 

Introduction. 

This is the first of a series of subcourses on the science of military cryptanal 3 d;ics. The 
purpose of this subcourse is to teach the student the methods of analysis of systems which 
form a basis for the more simple military cipher systems. An understanding of these prin¬ 
ciples is necessary to grasp the advanced cryptanalytic techniques employed in the attack 
on the complex systems which comprise present-day military cryptography. 

The scope of this subcourse is: fundamental principles; uniliteral substitution; poly¬ 
literal substitution; polygraphic substitution; and miscellaneous monoalphabetic substi¬ 
tution systems. It consists of nine lessons and an examination as follows: 

Lesson 1, Fundamental principles; frequency distributions. 

Lesson 2, Uniliteral substitution with standard cipher alphabets. 

Lesson 3, Uniliteral substitution with mbced cipher alphabets. 

Lesson 4, Polyliteral substitution with mono-equivalent cipher alphabets. 

Lesson 5, Polyliteral substitution with pqly-equivalent cipher alphabets., 

Lesson 6, Pdygraphic substitution: 4-square and 2-square matrices. 

Lesson 7, Polygraphic substitution: Playfair systems. 

Lesson 8, Polygraphic substitution: quadricular tables. 

Lesson 9, Miscellaneous monoalphabetic substitution systems. 

Examination. 

30 credits are allowed for the subcourse. You will not be limited as to the number of 
hoiu^ you may spend in the solution of the subcourse, any lesson, or the examination. For 
statistical purposes you are required to enter the number of hours spent on solution in the 
answer sheet. 

Texts and materials furnished: 

Military Cryptanalysis, Part I (1942). 

♦Appendix 2 (November 1946). 

*TM 11^484, Elementary Military Cryptography, March 1945. 

♦TM 11-485, Advanced Military Cryptography, 8 June 1944. 

♦Strip device (ASA Training Aid No. 1). 
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♦Printed and blank alphabet strips (Training Aid No. 2). 

Cross-section paper. 

*This material may be retained upon completion of tibe subcourae. No other materials are required. 

This course was pr^ared under the direction of the Chief, Army Security Agency. 

Special Instructions. 

So far as practicable, detailed wwk sheets which usually form a part of the solution 
should be submitted with the solutions. - In all the lessons of this subc^urse, it is required 
that the student recovo: all the cipher and plain t^ alphabets used. He will also be re¬ 
quired to state the method of opo^tion of e^ system and give the keys upon which each 
component is based. The specific keys and any dpho- table employed must be recovered. 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 

SUBCOURSE 20-6 
LESSON 1 

CREDIT 

TEXT ASSIGNMENT 

MATERIALS REQUIRED 
SUGGESTIONS 
EXERCISES 
Weight 

4 1. What four fundamental operations are involved in the solution of practi¬ 

cally every cryptogram? 

2 2. In the solution of cryptograms involving a form of substitution to what 

simple terms is it necessmy to reduce them in order to reach a solution? 

2 3. Is it always necessary to determine the specific key in order to reconstruct 

the plain text? 

10 4. Using cross-section paper prepare a uniliteral frequency bar distribution 

of the lettffl^ of the following paragraph: 

“The shortest and surest way to live with honor in the world 
is to be in reality what we would appear to be; all hmnan 
virtues increase and strengthen themselves by the practice 
and experience of thm.” 

'2 6. o. What percent (in round numbers) of the letters in English telegraphic 

text are E’s7 

2 b. What are the four most frequent consonants in English telegraphic text? 

2 e. What are the foiur most frequent digraphs in English telegraphic text? 

2 d. Account for the discrepancies between frequencies of letters in English 

literary text and English telegraphic text. 

4 6. What four facts can be detomined from a study of the Uniliteral frequency 

distribution of a cryptogram? 


Military Cryptanalysis, Part I 
Fundamental principles; frequency 
distributions 
3 

Text, Sections I to IV, inclusive; 
attached memoranda 
Cross-section paper of inch squares 
None 
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7. Determine the class to which the cipher systems, which were used in en- 
ciphaing the following messages, belong: 


a. 0 R A N A 

T H P N 0 

S K T C D 

M E E E S 

CERA 

R N U S A 

E T L G D 

A Y E C A 




i 

ABCDEFGH 

I J K L H 

N 0 P Q R S 

T U V W X 

Y Z 


6. D H J J K 

Q 0 A H R 

X K S 0 F 

H P Q G A 

P P 

H L 

D I A D E 

H J R 0 A 

H A H Q A 




i $_i 

ABCDEFGH 

I J K L M 

NOPQRSTUVWXYZ 


e. R 0 L E H 

K B W F Z 

C Q C P Z 

N V J W Z 

M I 

V E 

E P C I N 

0 J S J U 

Y H W Q B 




ABCDEFGH 

IJKLMNOPQRSTUVWXYZ 


8. Which of the following substitution ciphers are monoalphabetic? 


a. U J K L W 

E U V K L 

F S P A Q 

P H T K R 

D Z 

N G 

S E L Y N 

X Y X B X 

J D A T U 

W E U Z G 

W F 

V X 

11 N Z A Y 

A 0 S G U 

D C L G I 

0_ E W J E 

I F 

0 K 

K N W A P 

K 0 I E V 

A R 0 E V 

W S C W N 

S B 

C Y 

ABCDEFGH 

IJKLMNOPQRS 

T U V W X 

Y Z 


6, H U P Y P 

X X A E P 

A F G Z P 

V G L H A 

S L 

X H 

S X X A Y 

P W K A S 

L H P R H 

A L 0 B A 

X P 

L V 

W U P J P 

0 B S H U 

H U P G F 

X G K P H 

P V 

S W 

P J 0 P Z 

S V P Y S 

H P 0 A X 

U L S L P 

C G 

N J : 

^ ^ ^ gg 

ABCDEFGH 

= J i 

IJKLMNOPQRS 

TUVWX 

Y Z 
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c. 

G X Y V L 

Z X H X S 

L 0 Z G R 

WEJLX PWTKZ 


G M X L W 

Q I V Z W 

Q B R X K 

KTDVL HXAEX 


V H M X A 

L 0 T L Y 

T K D W X 

GBQKQ LWZXG 


R T Y Y Z 

K T 0 X G 

A W X L Q 

LOZGR XVWGQ 





I 

A B 

C D E F G H 

IJKLMNOPQRSTUVWXYZ 


9. The following messages were enciphered monoalphabetically. Detennine 
in each case whether the cipher alphabet used was a standard or mixed alphabet 
and if standard, whether diiwt or reversed. 


A N V 0 R 

L 

0 U N Q 

R L E Z W 

Z H N 

E 

z 

w z 

B 

0 R 

Z K Y L F 

A 

0 Z S 0 

0 N 0 R F 

P J Z 

P 

p 

L D 

Z 

D N 

L R Z L B 

L 

A B W Z 

H N A P 0 

W Q H 

0 

0 

R Z 

I 

Z U 


ABCDEFGHI'J 


i^LMNOPQRSTUVWXYZ 


6. ESPAP LVDLY OECZF RSDTY ESTDO 

TDECT MFETZ YBFTN VWJT.O PYETQ 

JTELD OTCPN EDELY OLCON TASPC 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 

e. PYHYL XOLWY JJVYX OILYR YQYPJ 

KNYLK YHYLC PAYAC LYXIR QYJVO 

ZKOXCPCREK UKUPJ lUJUO PRIAS 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 
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25 10. From the interested traffic of three intercept stations operating in the 

same sector of the front, the following messages were selected for study by a member 
of the cryptanalytic section at GHQ. They are imdoubtedly three versions of 
one enemy message, but there api)ears to be a number of differences, due no doubt 
to operating difficulties at the several stations. Study the messages and recon¬ 
struct from them the actual message sent by the enemy station. 


[. Time intercepted 1612 by HS 

WFF V 

LDC 



G R 35 

B T 








N R 1 7 

D y B I E 

D U F T 0 

A M 

E J A 

K 

I B 

0 

N 

S G C 0 y 

F 0 B A K 

D 0 D L A 

L U 

F Y D 

K 

A W 

A 

L 

A P A Y N 

C 0 D A P 

K E D U R 

J 0 

P I D 

J 

E N 

0 

X 

M E H A Z 

L 0 G I S 

K U T E G 

E V 

AUK 

I 

P B 

E 

M 

K E H Z A 

H 0 B W E 

A V D U Z 

F 0 

F A _ 

E 

M C 

0 

Z 

E G B L 0 

D 0 F Y 0 

E N C _ _ 

H A 

WEN 






II. Time intercepted 1610 by MR 



MFF V 

LDC 



G R 

35 


B T 









N R 

I _ 

D Y B 

I E 

B U F 

T 

0 

A M E J A 

K 

I B 

0 

N 

I P K 

0 _ 

F 

_ 

B 

A K 

D 0 D 

L 

A 

L U F y L 

K 

A W 

A 

L 

A P A Y N 

_ 

_ 


_ _ 

_ _ D 

U 

A 

_ _ P I D 

J 

E N 

0 

X 

N E H 

A Z 

L 

0 

G 

I S 

K U T 

E 

G 

E V A U C 

I 

R B 

W 


K E H 

Z A 

S 

0 

B 

W E 

V A D 

U 

Z 

F 0 F E T 

E 

M C 

0 

Z 

E G B 

L 0 

D 

0 

F 

Y 0 

AEG 

D 

A 

M A W E N 

_ 

_ 

0 

M 

EMC 

0 Z 

A 

c 

F 

A H 

L 0 F 

I 

R 

0 9 3 5 





III. Time intercepted 1612 

by YG 



WFF V 

LDK 



G R 

_ ■_ 


B T 









N R 

1 T 

D 

Y 

B 

I E 

D U F 

T 

0 

A M E J A 

K S B 

0 

N 

I P C 

0 Y 




A _ 

D 0 _ 


_ 

L U F y L 

K A W 

A 

L 

APE 

T Y N 

C 

0 

D A 

P K E 

D 

U R W 0 P I 

D 

J E 

N 

0 X 

M E H 

A Z 

L 

0 

G H K U T EC 


E V A U K I 

P B E 1 

il 


K E H 

Z A 

H 

0 

B 

W E 

A V D 

U 

Z 

F 0 F E T 

E 

M C 

0 

z 

E G B 

L 0 

D 

0 

F Y 0 

E N C 

0 

A 

M A W E N 

H A W E 

N 

E X F 

0 M 

E 

M 

C 

0 Z 

AGFA 

H 

L 0 F I R 

0 

9 3 

5 
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MEMORANDUM ON THE <t> (PHI) TEST 

1. The student has seen how it is possible by ocular examination to determine whether 
or not a substitution cipher is monoalphabetic. This tentative determination is based on 
the presence of a mark^ crest and trough appearance in the uniliterd frequency distribu¬ 
tion, and also on the number of blanks in the distribution. Hence,, the ab^ce of ma rked 
crests and troughs in the uniliteral frequ^cy distribution indicates that two or more cipher 
alphabets are involved: the flattened-out appearance of the distribution constitutes one of 
the tests for a polyalphabetic substitution cipha*. However, when the distribution contains 
a small number of elemoits, ocular examination and evaluation becomes increasingly 
difficult and hazy. Now, the student may ask, does a mathematical test exist that could 
determine the monoalphabeticity or non-monoalphabeticity of a distribution? 

2. Without going into the theory of probabilities at this time, or into the derivation of 
the formulas involved, let it suffice for the present to state that there is such a test, known 
as the (phi) test.” With this test, the “observed value of is compared with the "ex¬ 
pected value of 4> random” and the "expected value of ^ plain.” The fcamiulas are E(^i) = 
.0385N(N-1) and E(^p)=.0667N(N-l), where N is the total numba* of elements in the 
distribution. The use of these formulas is best illustrated by an example. 

3. The following short cryptogram with its aecompansdng uniliteral frequency distribu¬ 
tion is at hand: 


QCYCH ADSKS YZZQE CYKYK QZYSK 
LSZAC TKFCX LKLKC ESZMX KISZX 



ABCDEFGHIJKLMNOPQRSTUVWXYZ 

The obsoved value of ^ is calculated by applying the formula f(f-l) to the frequency (f) of 
each letter and totaling the result. Thus, 

N = 2 612 111 831 3 61 356 = 50 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 
f(f-l) = 2 30 0 2 0 0 0 56 6 0 6 30 0 6 2030 =188 

The expected value of 0 random is 

E(^) = .0385N(N-1) = .0385 x 50 x 49 =94.3 
The expected value of 4> plain is 

E(4p) =.0667N(N-1) = .0667 X 50 X 49=163.4 

Now since the observed value of 188, is equal to and in fact greatw than E(^p), then we 
have a mathematical corroboration of the hypothesis that the cryptogram is monoalphabetic. 
If the observed value of ^ were nearer to E(^), then the assumption would be that the 


LMKm 1 , MiKtuy Cryptanaljni^ Put 1 (20-6) 
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cryptogram is non-monoalphabestic. If the observed value were just half-way between 
E(^) and E(^), then decision would have to be suspended as there is no further statistical 
proof in the matter. 

4. Two further examples may be illustrated: 

$ N=25 

o. ABCDEFGHIJKLMNOPQRSTUVWXYZ 

0 026 12 2 0 12 2 0 0 6 f(f-l)=42 

= ^ N=25 

6. ABCDEFGHIJKLMNOPQRSTUVWXYZ 

0 00 2 000600 02 00 0026 f(f-l)=18 

Since both distributions have 25 elem^ts, then for both 
E(0,) = .0385 x 25 x 24 =21 
E(<^) = .0667 x 25 x 24 =40 

Hence distribution a is monoalphabetic, while b is not. 

5. The student must not assume that statistical tests in cryptanalysis are infallible or 
absolute in themselves: statistical approaches serve only as a means to the end, in guiding 
the anals^t to the most probable fruitful sources of attack. To illustrate this point, if the ^ 
test is taken on the plaintext letters of the phrase 

A QUICK BROWN FOX JUMPS OVER THE LAZY DOG 

N = ^ ^ ^ ^ ^ __= =33 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 
f(f-l) = 20002000000000 12 00200200000 =20 
E(<A,)=40.7 E(^)=70 

it will be noticed that the observed value of <l> is exactly half of E((/),), therefore “conclu¬ 
sively” proving that the above phrase could not possibly be plaintext in any language! The 
student should be able to imderstand the cause of this crypt<^raphic 'phenomenon.' 
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MEMORANDUM ON TRAFFIC INTERCEPTS 

1. Before a military cryptanalyst can b^;in the analysis of an enemy cryptographic 
system, it is necessary for him to study the intercept material that is available to him, 
isolate the messages that have been enciphered by means of the cryptographic system to be 
studied, and to arrange the latter in a systematic order for analjrsis. This work, although 
apparently very simple, may require a great deal of time and effort. 

2. Since, whenever practicable, two or more intercept stations are provided to copy 
traffic emanating from the stations of one enemy radio net, it is natural that th«« should 
be a certain amount of duplication in the work of the several stations. This is desirable 
since it provides the cryptanalysts with two or more sets of the same messages so that when 
one intercept station fails to receive ah the messages completely and correctly, because of 
set difficulties, local static, or i>oor operation, it is possible by studying the other sets to 
reconstruct accurately the entire traffic of the enemy net. 

3. In all inta*cept activities where operators are used fca* copyihg the traffic, one of the 
most likely erors to be found is caused by the human error in reception. For this reason 
cryptanalysts and their assistants should be familiar with the Morse telegraph alphabets 
and the most common errors of wire and radio transmission methods so as to be able to 
correct garbled groups when they occur. In this work reference is made to the table given 
on page 82 of TM 11-484 (Elementary Military Cryptography). 


La«on 1* Military CryptanalyBla, Fart 1 (20-6) 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 

SUBCOURSE 20-6 Military Cryptanalysis, Part I 

LESSON 2 Uniliteral substitution with standard 

cipho* alphabets 

CREDIT 3 

TEXT ASSIGNMENT Text, Section V; attached memorandum 

MATERIALS REQUIRED None 

SUGGESTIONS None 

EXERCISES 

Weight 

40 , 1. o. Solve the following cryptogram: 

5 10 15 20 25 


A 

J M Q V S 

Q Z X I F 

F M Z S L 

I Z M L Z 

C E M E B 

B 

F Q 0 M E 

U D X Y Q 

0 Z C Y Y 

X J H Z I 

V M Z I Y 

C 

0 Q W Y I 

D K Y M V 

M Z M N Q 

E Q K M X 

C C W Z B 

D 

C Y I X I 

C D Y Y X 

C B Z Q I 

F Z C Q N 

H W D 0 X 

E 

I C D J Q 

Y P M M D 

Y M V M Z 

M F S N Q 

E Q K M N 

F 

Q D N E W 

0 J M A W 

I B E 11 D 

X N M Y X 

Z C S M N 

6 

Y X C B U 

M Q Z M E 

C V I D K 

C W Z X Z 

C C B Y X 

H 

C Z M Q Z 

B C Y I X 

I C D Y Y 

X C B Z Q 

F Y X C D 



ABCDEFGHIJKLMNOPQRSTUVWXYZ 
./.=2636 E(«p)=2664 ‘ E(^)=1531 
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5 6. What is the specific key? 

5 c. Name two methods of solving ciphers of this type. 

2. Solve the following crypt(^;rams: 

10 O.QHHYL YDWQJ JMEFC 

10 6. YXSEDYFSXUHWXUS 

5 c. What are the specific keys? 

10 3. a. In the solution of a substitution cipho* by completing the plain com¬ 

ponent sequence involving reversed standard alphal^ts, what are the successive 
steps? 

5 h. What is the first step one should take in attempting to solve an un¬ 

known cryptogram that is obviously a substitution cipher? 

5 c. If this step is unsuccessful and the cryptogram is obviously monoalpha- 

betic in character, what type of cipher alphal^t may be assumed to have been 
used? 

5 d. Why do monoalphabetic (ayptograms involving standard cipher alpha¬ 

bets sdeld such a low degree of cryptographic security? 
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MEMORANDUM ON CRYPTANALYTIC PROCEDURE 

The following suggestions will promote s]rstematization of procedure and logic in analy¬ 
sis. Experience has shown that time and labor can be saved by careful attention to these 
instructions. 

1. Most of the problems in this course are already laid out in worksheet form, to spare 
the student the clerical labor of copying out the text. However in those cases where work¬ 
sheets must be prepared, the cipW text should be copied in ink on cross-section paper, 
one letto* per cdl. There should be a single space between letters or digraphs in mono- 
alphabetic systems, and a single space between period lengths in poljralphabetic systems. 
In apoiodic sjrstems groupings may be in five letters, unless the system lends a better 
alternative. At least three spaces l^ween successive lines of cipher text is recommended 
in ordo* to leave room for multiple assumptions. Line and column indicators are to be made 
for each cryptogram, to facilitate reference in the step-by-step commentary. Margins 
should be l^t on all sides for notes, etc. AU worksheets and notes should be submitted 
togethtf upon the completion of a lesson. 

2. Enciphering alphabets, enciphering diagrams, etc., as well as all k^nvords and i^)ecific 
keys should be included in a solution. K^^ord derivation from transposed sequences will 
also be shown. Whereas there should be a letter-fw-letter decryptment under the cipher 
.text, the final plaintext version in word-lengths should correct any errors or garbles in the 
text. Nulls or indicators showing sentence separation, change of key, etc., may be enclosed 
in parentheses. 

3. If coinpleting the plain component sequence yields no solution, then imiliteral 
frequency distributions (or digraphic distributions, if a digraphic'system) should be made. 
Triliteral frequency distributions will enable the separation of vowels and consonants and 
furnish much additional valuable data. In a difficult case triliterals may give the only 
dues to solution: this is especially true in fmeign language cryptograms. If the problem 
Kitails the selection of proper genwatrices in polyalphabetic dphers, the use of dphabet 
strips will save much time. In polypartite systems, reduce the cryptogram to mono- 
lite^ terms wherever possible. 

4. Repetitions should be undoscored in a manner facilitating their location and inter¬ 
pretation: colored pencils will be foimd useful. It is recommended that the frequences of 
lettm comprising the repetitions be inscribed over their respective letter. Likewise, the 
frequencies of the first 10 and last 10 letters should also be inscribed, as in many cases these 
positions lend thcnselves readily to attack. If the problem proves difficult, then it is best 
to inscribe the frequences over all the cipher letters of the text, in order better to visualize 
frequency-patterns of words. 

6. Step-by-stQ) analyses should accompany all problems: they should be brief and 
concise, yet at the same time specific. The steps should be jotted down as they are made, 
and at the end they should be combined into a complete resume of the analysis. It is not 
necessary to be vcbose, but aU the steps which were taken to achieve solution should be 
specified, so that at any future date the solution may be reconstructed following the exact 
manner in which it was first accomplished. Assumptions of words, etc., should be referred 
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to with line and column indicators and couched in the proper ayptologic language or symbols. 
All ke 3 n¥ords and specific keys, as well as the mechanics of the genial system, should be 
stated at the end of the commentary. 

6. Violations of cryptographic security observed in the problem studied may be included 
at the dose of the commentary. These violations may be stereotypic phraseology (especially 
in bepnnings or endings of messages), related ke 3 ?words, kesrwords of military nature, 
unnecessary punctuation, general wordiness, or any oth^ practices dangerous to crypto¬ 
graphic security which may be seized upon by the cryptanalyst as entmng wedges in solution. 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 

SUBCOURSE 20-6 Military Cryptanalysis, Part I 

LESSON 3 Uniliteral substitution with mixed ciphe* 

alphabets 

CREDIT ' 3 

TEXT ASSIGNMENT Text, Section VI; attached memcuandum 

• MATERIALS REQUIRED Cross-section paper of % inch squares 

SUGGESTIONS None 

EXERCISES 
Wdght 

20 1. a. Construct a triliteral frequency distribution showing one prefix and 

one sufi^ of the cr^togram bdow. On the worksheet below indicate by under-i 
scoring in black all repetitions of three more letters. Other significant details 
may be marked in different co1<m^. 

6 b. Prepare a condensed table of repetitions of digraphs and trigraphs 

^pealing mwe than twice, and include aU repetitions of longer polygraphs. 

20 2. a. Using the data'obtained in a and b above, complete the solution of the 

cryptogram. 

5 10 15 20 25 


A 

5 

R 

I K 

N 

A Q 

J 

I 

R 

N 

Q A 

I 

P 

F 

T E 

A 

I 

0 

J 

I 

R 

I 

B 

J 

I 

P J 

G 

G A 

Q 

Q 

A 

J 

I R 

E 

J 

B 

B A 

P 

R 

N 

V 

R 

N 

R 

C 

P 

H 

K S 

T 

N R 

E 

F 

H 

Q 

S I 

A 

0 

L 

5 A 

I 

H 

N 

H 

A 

E 

Y 

D 

X 

J 

I R 

J 

B J 

T 

N 

K 

H 

S N 

J 

F 

Q 

Q S 

J 

K 

J 

I 

R 

K 

N 

E 

A 

Q 

J I 

R 

N Q 

S 

H 

S 

R 

Q s 

L 

H 

S 

B J 

T 

N 

S 

L 

E 

A 

U 

F 

A 

Q 

A J 

I 

A Q 

A 

I 

U 

A 

P A 

I 

A 

S 

X J 

B 

Y 

F 

T 

R 

G 

J 

G 

T 

I 

S H 

A 

I G 

J 

U 

A 

I 

0 V 

R 

Q 

S 

S J 

H 

S 

S 

H 

P 

D 

J 

H 

T 

N 

K J 

Q 

A S 

A 

J 

I 

Q 

V R 

Q 

s 

J 

B B 

H 

N 

N 

R 

F 

F 

Q 

J 

N 

A 

E 0 

R 

Q S 

J 

K 

P 

J 

I B 

A 

N 

G 

H S 

A 

J 

I 

J 

B 

S 

L 

K 

A 

Q 

N R 

K 

J N 

S 

A 

Q 

N 

R H 

T 

R 

Q 

S R 

E 

X 
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2 b. Determine the ciphar alphabet and the keyword used. What is the 

specific key (Ap = ee)? 

2b, solve the following 

D F G Y P 
Y U X H R 

U V W X Y Z 


U V W X Y Z 

smselves more readily to 
successful attack by the assumption of words than do any other places? Why? 

2 b. What is meant by the “probable WOTd method” of solution? 

2 6. o. What is meant by the word pattern “A B C B A D B”? 

6. For each pattern given below, indicate one good English word that 
contains the pattern: 

2 (1) A B C B A D B 

2 (2) A A B A 

2 (3) A B C D A 

6, The following cryptograms, enciphered with random cipher alphabets, 

are in bona fide word-lengths. Solve them. 

5 a. 

HY ARVJZGHAROT VK CGKMMGKHZM LKUG 
LKUG OROE HOZ EMVHFSRMJROT 
JEHZPUHGVEGH RO HCJKKSJKUME 


3. Using the same components as determined in 
OTptograms and indicate the specific keys: 

a. 

FPFEN lYRUE PWSFX FWVXK 
ALCAS KNVAL WEYXP LPCJN 
K P F W X 


ABGDEFGHIJKLMNOPQRST 
^ = 144 E(*p)=198 E(^0=114 

b. 

EPSSP AOEOA DKTPU UXMNJ 

ABGDEFGHIJKLMNOPQRST 
« = 16 E(^p)=25 E(«,) = 15 

4. a. What two places in every message lend the: 
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ft- 

RGRQRU TDSPYURDP ZFTAVDRC AY CFO 
JO DRZYUUFSPPFUZR TFADYGP 

.7. In solving several imrelated monoalphabetic cryptograms the following 
ciphe- alplu^ts were reconstructed. Recover all keywra-ds in each case. To 
expedite solution, significant segments have l^n unde-lined. 


P:ABCDEFGHIJKLUNOPQRSTUVWXYZ 
C: N L W PFRTHSYDQ A K V EBMXGCOZ I J U 

ft. 

P:ABCDEFGHIJKLUNOPQRSTUVWXYZ 
C: Z Q X P E 0 N M W L K J H G F DBVYUTRICSA 

c. 

P:ABCDEFGHIJKLMNOPQRSTUVWXYZ 
C: P Q E R V M 0 Z W U T H A-X BCD F S Y G I J K L N 

d. 

P:ABCDEFGHIJ'KLMNOPQRSTUVWXYZ 
CrAUZJTXHSWGRMBN PCI Q F E K Y P D V L 

e. 

P.-ABCDEFGHIJKLMNOPQRSTUVWXYZ 
C: C K V E B 0 Y F D P Z GQHSITLWNJURAMX 
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MEMORANDUM ON ALPHABET RECONSTRUCTION 
AND KEYWORD DERIVATION 

1. Concurrent with the solution of a cryptogram, there should be a simultaneous effort 
in the reconstruction of the general system and recovery of the specific keys. Much labor 
can thus be saved as recov^ of the keys early in the stages of solution transfonns the 
process of decrypting into one of decryptographing. 

2. A cipher alphabet consists of two sequences, e.g., 

o. the plain component is a standard alphabet, cipher component mixed; 

b. the cipher component is a standard alphabet, plain componrait mixed; 

c. both components are the same mixed sequence; 

d. both components are the same mixed sequence, running in reverse; or 

e. the components are differently mixed sequences. 

3. Let us examine sevaal types of mixed sequences, using the keyword HYDRAULIC as 
an examine: 

493 718652 
HYDRAULIC 
BEFGJKMNO 
PQSTVWXZ 

The ordinary keyword-mixed sequence doived from the above will be: 

o. HYDRAULICBEFGJKMNOPQSTVWXZ 

The two principal transposition-mixed types will |*ad: 

b. HBPYEQDFSRGTAJVUKWLMXINZCO and 

c. AJVCODFSHBPINZLMXRGTUKWYEQ 

Other types may arise from route transpositions as follows: 

d. H B P Q E YDFSTGRAJVWKULMXZNICO 

e. H y B P E D R FQSGAUJTVKLIMWXNCOZ 
/. PBQHESYFTDGVRJWAKXUMZLNIOC 
j. HYDRAULICONMKJGFEBPQSTVWXZ 
h. OCILUARDYHBPQSTVWXZNMKJGFE 
1. HYEB.PQSTGFDRAUKJVWXZNMLICO 

y. 'CPIOQBLNSEHUMZTFYAKXVGDRJW etc. 

Any tran^X)sition S 3 r 8 tem may be employed to produce a systematically-mixed sequence: 
practicability of method is the only detamining factor. It must be remembered that the 
greatest amount of systematic mixing will produce a sequence inhaently no more secure 
thkn a random alphabet. 

1 


Lemn 3, MiHtary CryptwialjnSa. F>rt 1 (20-6) 
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4. The student would do well to construct both enciphering and decipheing ve^ons 
of cipher alphabets recovered. Fw example, in the following case 

Plain: JQNMFHLEBRSKGYZOTICDUVAWPX 

Cipher: ABODE FGHIJKLMNOPQRSTUVWXYZ 
no semblance of a key is apparent; but in the invade form 

Plain: A BODE FGHIJKLMNOPQRSTUVWXYZ 

Cipha-: WISTHEM'FRALGDCPYBJKQUVXZNO 
the key-phrase “NOW IS THE TIME FOR ALL GOOD MEN TO COME TO THE AID 
OF THEIR PARTY” is quite dear. In other types of mixed sequences, first the one form 
is attacked, and then if native results are obtained the inva^ form is treated. 

5. Let us consider the following cipher alphabet: 

P: ABCDEFGHIJKLMNOPQRSTUVWXYZ 
C: DWZMSOCRYATXBEFUGQHIVJKLNP 

The section V W X seems to be superimposed parts of the non-keywcn-d portions of mixed 
J K L 

sequences. AddingYZtotheplaincomponent,wegetV W X Y Z which is catainly con- 

J K L N P 

sistent as far as alphabetical progression goes, and indicates that the lettas M and 0 are 
present in the keyword of the dpha component. Continuing in this vein, the section 
MNOQSTVWXYZ is rapidly established by correlating both sequences. It is obvious 
BEFGHIJKLNP 

that the plain component keyword begins right after the Z, and that the dpha component 
keyword probably just precedes the B. Going to the right, Z R H suggests keywords like 

P Q R 

RHOMBOID, RHEUMATISM, etc. These trials are quickly repudiated; thaefore we 
go on to Z R E which is acceptable. Z R E K is found wanting, but Z R E P is very sat- 
PQS PQST PQSU 

isfactory, and this is soon expanded toZREPUBLIC, and in a moment or two we 
PQSUVWXYZ 

recova the complete dpha alphabet: 

P: REPUBLICANDFGHJK MNOQSTVWXYZ 
C: QSUVWXYZDEMOCRATBEFGHIJKLNP 

6. In the example bdow the student will observe that the alphabets are redprocal: 

this is an indication of identical sequences at a shift of 13, a that a mixed sequence running 
against itsdf in revase has been employed. In this case the W X Y Z points to the latta 
hypothesis. Z Y X W 

P: ABCDEFGHIJKLMNOPQRSTUVWXYZ 
C:HOJFTDNAKCIMLGBSUVPEQRZYXW 

Starting with the V W X Y Z R clusta, we see that the k^rword b^ns with the letta R; 
R Z Y X W V 

thaefore the next letta should be a vowel. Z R A is not acceptable, but Z R E is fine, show- 
W V H W V T 
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ing tiiat the letter U appears in the ke 3 rword. Continuing the same line of reasonii^ as in 
the preceding ample, and with a little furtho* experimentation, the final alphabet is 
discova^ to be 

P: REPUBLIC A NDFGHJKMOQSTVWXYZ 
C: VTSQOMKJHGFDNACILBUPERZYXff 

7. In the nert example, all effcnrts to derive keywcmis on the basis of k^vrord-mixed 
sequences are fruitless: the conclusion is therefore drawn that this is a case of a transpodtion. 

P: ABCDEFGHIJKLMNOPQRSTUVWXYZ 
C: ACSEJYIGWLFVMHXNKZPBQRDUTO 
Considering the mechanics of the cryptography involved, and assuming for the time being 
that Z is at the bottom of the matrix and not in the keyword, we start with the letters to 
the left, or if this fails, to the right of Z in the ciphri* component, obtaining the column N 

K 

Z 

which is not incompatible if N is in the keyword on the top row. If we place Y to the left 
of Z and build up tte column, we get E N which is certainly excellent. This is expanded 
J K 
Y Z 

into I If E N which quickly becomes 71843526 9 . This last example was very 
GHJK PARLIMENT 

fXYZ BCDFGHJKO 

QSUVWXYZ 

easy because none of the letters V W X Y Z appeared in the keyword; but other cases should 
har^y prove more difficult. 

8. Two additional methods that have been encountered for deriving mixed sequences 
may be menticmed. One is a slitffit modification of the isreceding paragraph, when the 
keyword contains repeated letters^ viz: 

18734 9526 
C 0 M . I T . E . 

A B D F G H J K L which produces the mixed sequence 

NPQRSUVWX 
Y Z 

CANYEKWFRIGSJVLXMDQOBPZTHU 
The otba* method is the interrupted-key columnar transposition system, viz: 

2. 1 3 5 ,.4.6 
J A N U R Y 
B C) 

D) 

E F G) which produces the mixed sequence 

H I K L y) 

0 P Q S> 

T V W X Z -) 

ACFIPVJBDEHOTNGKQWRM-ZULSXY 
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The first example will succumb to the treatment outlined in par^aph 7, who'eas the 
second method is vulnerable owing to the presence of the fiagn^nts EHOT, FIPV and 
G K Q W in the sequence which may be anagrammed. Note the fragmrait E D E H 0 T, 
composed of an ascending sequence of letters: this is an outward indication of the interrupted- 
key columnar method. 

9. There are still otha- methods used for the production of mixed sequences, but space 
does not permit giving fiu1;her examples. Howeva* the student should by this time be able 
to devise methods of attack for any special cases that may present themselves, based upon 
the weaknesses or peculiarities inherent in the system of cryptography involved. 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 


SUBCOURSE 20-6 
LESSON 4 

CREDIT 

TEXT ASSIGNMENT 
MATERIALS REQUIRED 
SUGGESTIONS 
EltERUli^ 


Military Cryptanalsrsis, Part I 
Polyliteral substitution with mono-equiv¬ 
alent cipher alphabets 
3 

Text, Section VII; attached memorandum 
Cross-section paper of H indi squares 
None 


20 1. Solve and recover-all keys: 

5 10 15 


A 

,DT 

LR 

WE 

OE 

OE 

WH 

RR 

WR 

LA 

WH 

WA 

DE 

DA 

WR 

le 

B 

LE 

OR 

RE 

WT 

OR 

WA 

OH 

WH 

OR 

LE 

LR 

WA 

RR 

RR 

WH 

C 

WA 

WH 

OE 

OR 

LE 

LE 

WR 

WA 

WH 

OH 

LR 

LE 

LR 

WA 

OH 

D 

OE 

LR 

OA 

OA 

OE 

LR 

OR 

RE 

OA 

OA 

WH 

WT 

WH 

WA 

WA 

E 

HR 

WA 

JH 

DE 

RT 

OE 

WH 

WH 

RE 

OR 

OA 

RT 

OE 

LR 

OR 

F 

RE 



WA 

OH 

DE 

WR 

LR 

WA 

WA 

WR 

WA 

WH 

DE 

DA 

G 

LR 

LR 

WA 

WH 

OA 

DE 

LR 

LT 

LT 

LR 

OA 

WR 

DE 

WR 

LR 

H 

WA 

OA 

LR 

RA 

RA 

LR 

WE 

OE 

DE 

RT 

OE 

WH 

m 

WR 

LA 

J 

WH 

WA 

DE 

DA 

WR 

LE 

LE 

OT 

WH 

OE 

WH 

WH 

WA 

RA 

LR 

K 

OE 

OH 

WH 

RE 

OT 

DT 

OR 

RE 

RE 

WR 

DE 

WR 

LR 

WA 

OR 

L 

LE 

OR 

OE 

DE 

WR 

LE 

u 

WH 

OE 

DT 

OA 

WE 

LT 

LT 

LR 

M 

OE 

DE 

OA 

DE 

LR 

LT 

OH, 

LR 

LE 

LR 

WA 

WH 


OT 

WH 

N 

WA 

WA 

WR 

WA 

RR 
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A 

E 

H 

R 

T 

3 

12 

_ 

_ 

3 

2 

13 

- 

21 

5 

10 

14 

6 

10 

3 

3 

7 

- 

5 

3 

22 

4 

22 

13 

2 


4>=228S 


20 2. This 

all keys: 


E(«,)=1362 E(«p)=2270 

(25-element alphabet) 

was sent by the Fifteenth Infantry. Solve it and recover 
5 10 15 


A 

CY 

AO 

NX 

CN 

NO 

CN 

AO 

AO 

OG 

ON 

NG 

BY 

OX 

OX 

RO 

B 

CG 

NY 

RO 

AN 

RE 

AG 

RO 

OX 

AO 

AN 

AX 

AX 

AG 

AN 

AG 

C 

CN 

RO 

OX 

OX 

BY 

AN 

AG 

CN 

BE 

CX 

BN 

BX 

CG 

RO 

ON 

D 

CO 

RE 

CN 

AY 

BG 

CE 

ON 

NO 

AO 

OG 

RO 

NO 

NO 

RO 

RE 

E 

00 

NG 

BY 

OX 

OX 

RY 

AG 

AX 

BY 

AN 

OG 

CN 

AO 

OY 

OG 

F 

NO 

OX 

CY 

NX 

OG 

AO 

AN 

CN 

AG 

RE 

AG 

BY 

OG 

NO 

AO 

G 

BO 

AO 

CN 

CG 

AG 

CN 

ON 

BO 

CN 

AO 

OY 

CO 

OE 

ON 

NO 

H 

AO 

OG 

RO 

NO 

NG 

RO 

NO 

AG 

CN 

RE 

AO 

OX 

RX 

AE 

BY 


E G N 0 X Y 


A 1 9 7 12 3 1 

Bill 316 
C 1 3 11 2 12 

n| - 3 - 9 2 1 

17 5 19 2 

5-9 11 


E(<^r)=410 E(^) =960 (approx.) 

(36-element alphabet) 
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3. Solve imd recova* all keys: 


5 10 15 


m 

GP 

EE 

GR 

RG 

GP 

ES 

GR 

RG 

PP 

GE 

PR 

GE 

RG 

GS 

AS 

GR 

RR 

GS 

AE 

PP 

CP 

GA 

PP 

RA 

EA. 

ES 

GR 

RG 

PP 

iss 

RA 

PR 

GS 

RE 

GP 

AR 

GP 

GS 

PP 

GP 

RG 

RA 

EA 

PP 

PS 

PG 

AR 

PE 

GA 

RR 

RG 

GP 

RR 

RE 

PG 

PP 

RA 

EA 

RS 

PG 

PE 

RG 

AR 

PE 

GA 

KR 

RG 

GP 

RR 

RP 

AE 

GS 

GA 

AP 

GP 

PP 

RA 

EP 

ES 

GP 

RA 

GP 

RA 

PE 

PR 

PR 

AE 

GR 

GP 

RA 

GA 

GP 

GP 

RR 

GP 

RR 

GR 

AS 

AS 

GP 

RR 

GR 

GS 

PP 

GP 

AE 

GE 

RS 

PG 

RG 

GS 

RE 

PP 

GR 

GG 

GS 

PP 

GR 

PG 

GA 

PG 

RS 

RE 

PG 

AS 

PR 

GS 

GA 

GE 

RR 

EA 

ES 

GR 

RG 

RR 

RP 

GS 

PP 

PP 

GS 

AE 

GR 

PG 

GA 

EP 

RG 

GP 

EE 

GR 

RA 

GR 

PP 

GR 

PG 

GA 

AR 

GS 

RA 

RP 

GP 

GP 

GA 

GS 

PE 

ES 

PG 

RG 

GR 

ER 

GP 

RR 

RP 

GE 

RG 

GP 

AG 

GR 

AS 

GP 

GA 

PP 

GS 

AE 

AR 

PA 

EP 

RG 

GP 

PR 

AE 

GE 

RG 

GP 

EE 

GP 

RA 

PP 

GP 

RR 
















A 

E G 

P 

R S 








A - 7 1 1 5 5 

E 4 3 - 3 1 5 

G 11 7 1 27 16 14 

P 1 5 10 16 6 1 

R 11 4 16 4 12 3 


4=2294 E(4,)=1164 E(4p)- 2260 (appr<a.) 

(SO-elemait alphabet) 
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5. The following is a text in the Baudot teletype code enciphered by a simple machine 
employing five two-position switches which operate polarized relays. Elach switcli has the 
function of changing the polarity of its respective baud (a single "mark” » "space” impulse), 
if tiie switch is in the 'active' position. If the switch is in the 'inactive' position, the polarity 
of the baud is unaffected. TTie switdi settings remain constant for each message. As an 
example, if switches 1 and 4 are active (*), and 2, 3 and 6 are inactive (-), then the word 
ENEMY is enciphered thus: 

Key: ' *—*- *—*- *—*- *—*- *—*- 

Plain: MSSSS SSMUS IfSSSS SStOOi HSMSM 

Cipho-: SS;^ MSMSS SSSfS MSMSM SSMMH 

It is suspected that the same signature is in the text as was present in Problem 2. Solve 
the message and recovo- the switch sitings. 



1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

A 

USICSS 

WKMM-C; 

MSSSM 

MMSMM 

iiiniM.g; 

MSSSM 

su«s 

SMSSS 

SSSSS 

SMSMS 

B 

USMSS 

MSSSS 

USSSM 

.<;.<a«uy 

iryR.«ai 

MMSMS 

MSUOi 

MMMSM 

MMMSM 

SSMMM 

C 

inissif 

yuiniu 

SSMSH 

uu<?uu 

MSMSS 

MSS;^ 

SIQOI 

MMMMM 

MSMSS 

MMSSM 

D 

IfHHSS 

maiss 

SSHSM 

UUUUM 

sssss 

Mss;ai 

SSSMM 

MMSSM 

MMMMM 

SSMSM 

E 

USSSM 

USIOIS 

MSSMM 

MSSSM 

MSSMM 

SSMSM 

SMMSS 

MSMSS 

MSMMS 

MSSMM 

F 

USSSM 

SMMUS 

SMSHM 

MMSSM 

SMMSS 

MMSSS 

SMMSM 

SMSSM 

MSlOiS 

SSSSS 

G 

MMMSS 

MSSMS 

SMSMS 

MMMSM 

MMMSM 

MSSSM 

MSSSM 

SMMSM 

MSMSS 

SMMSS 

H 

SHHSM 

MSMSS 

SSMSM 

MMMMM 

MSSSM 

MMSMM 

MSMMS 

MMMSS 

MSSSM 

SMMMS 

j 

SMSSS 

MSMSS 

SMSMS 

MSSSM 

MMSSM 

MSSMM 

SSSMM 





^«386 


MMMMSS S S 
HMSSHM S S 
MSUSMS M S 


514431 6 1 
15-841 13 1 
-34313 1 2 
2-5-2-3 


E(<^.)=234 E(*p) = 

(32-element alphabet) 


■480 (approx.) 
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MEMORANDUM ON THE BAUDOT TELETYPE CODE 

Teletypewriters employ in their operation a fixed-length five-element code similar to 
the Baconian quinqueliteral cipher. Each character in the code consists of five “mark” 
or “space” impulses in the 32 possible permutations. However, to allow for a greater num¬ 
ber of characters than 32, a “Fig.” indicator changes to an upper alphabet and the “Ltr.” 
indicator re-establishes the lower alphabet. The other process symbols, in addition to the 
space between words, are the CR (carriage return) which returns the carriage to the left- 
hand margin on the completion of a line; the LF (line feed) which feeds the paper, rolling 
the carriage to the next lower line; and the “Bell” which rings a bell to signal the operator 
at the receiving end that there is traffic ready to be transmitted. Below is a diagram of the 
normal Baudot code in international use; the black dots represent the holes in the teletype 
tape which are the “mark” impulses, while the “space” impulses are unperforated. 




o 




31 

•E 

3= 

N 


• 




4 



SIT 

7 


T 


TT 

1 

5 

1 


au 

B 

□ 

□ 

BE 

□ 

□ 

ID 

o 


B 

□ 

□1 

m 

□ 

□ 

a 

□ 

a 

□i 

Q 



LOWER CASE 1 

ID 

D 

D 

D 

DE 


D 

ID 


n 

D 

D 

DE 

ED 

D 

D 

D 


D 

DE 


1 

1 

■ 



■ 

□ 

□ 

□1 

■ 

■ 

:]□ 







• 

□ 

□ 

□ 

□ 

□E 

■ 

■ 


□ 

□ 



□ 

■ 

■ 

■E 

■ 

□ 

in 

□ 

■ 

■ 

■ 

□E 

:]□ 

■ 

■ 

□ 

□ 

■ 

■1 

■ 

■ 

im 

□ 

□ 


m 

m 

□ 

Q 

□ 

□ 

□E 

ni 

□ 

□ 

□ 

n 

3B 

□ 

■ 

□ 

n 

□ 

n 

□ 

■ 

□E 

3D 

□ 

□ 

□ 

□ 

□ 

□E 

□ 

■ 

□ 

■ 

3D 

■n 

D 

D 

. 

!□ 

□ 

□ 

■ 

LJI 

□c 

■ 

LJ 

■ 


■1 

■ 

LJ 

□ 

kJ 

□ 

■ 

□ 

■1 

IG 

■ 

- 

■ 

■ 

□ 

■1 

■ 

■ 

■ 

□ 

■LJ 

IB 

□ 

□ 

B 

□ 

_5_L 

2 

_ 


_ 

■[ 



■■ 

□ 

□ 

- 

□ 

□C 


_ 

• 

■ 

ID 

□ 

□[ 

■ 

■ 

IB 

□ 

□ 


The example below is a Baudot tape, containing the beginning of the phrase "NOW 
IS THE TIME FOR ALL GOOD MEN. . . .” 


NOW IS THE TIME FOR ALL GOOD MEN 
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Leason 4, Military Cryptanalysis, Part 1 (20-6) 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 


SUBCOURSE 20-6 
LESSON 5 

CREDIT - 

TEXT ASSIGNMENT 

MATERIALS REQUIRED 

SUGGESTIONS 

EXERCISES 

Weight 


Military Cryptanalysis, Part I 
Polyliteral substitution with poly-equiv¬ 
alent cipher alphabets 
3 

Text, Section VIII,'attachedmemorandum 
Cross-section paper of % inch squares 
None 


5 1. a. What is the purpose of providing variants in a cipher system? 

5 b. From the cryptanalytic point of view, how does simple monoalphabetic 

substitution diffa* from monoedphabetic substitution with variants? 


20 2. Solve and recover all keys: 

5 10 15 




A 

RA 

DE 

KE 

PE 

VE 

TI 

BO 

LA 

GO 

DU 

JO 

BE 

KI 

BI 

JO 

B 

BU 

JA 

VA 

ME 

LA 

BE 

KI 

RE 

FE 

DO 

VI 

JO 

SA 

DO 

JE 

C 

KI 

BA 

HO 

SA 

cy 

GE 

GE 

PI 

BO 

KI 

JU 

CE 

Cl 

MI 

NE 

D 

PO 

JU 

CE 

RE 

NA 

BU 

BE 

KO 

RA 

DE 

KE 

TE 

SE 

TI 

JO 

E 

FA 

GO 

DU 

DO 

JE 

KI 

DI 

JO 

BU 

JA 

CE 

BO 

FO 

BA 

BU 

F 

DA 

LE 

JO 

NI 

DO 

NA 

BO 

BE 

PI 

GI 

ME 

TE 

CO 

JO 

TI 

G 

SA 

BO 

TI 

DU 

MO 

FA 

BU 

NA 

DU 

DE 

TO 

GI 

BE 

SE 

BU 

H 

GE 

CO 

PA 

TA 

KE 

CE 

NA 

VA 

HO 

LO 

HE 

NA 

DU 

DE 

CE * 

J 

BO 

FO 

DA 

DU 

DA 

LE 

BO 

SI 

JO 

VA 

DO 

DE 

TI 

NI 

DO 

K 

CO 

FI 

DE 

VE 

Cl 

BU 

DA 

LE 

BO 


DO 

NA 

JO 

BE 

KI 

L 

VA 

DU 

DE 

KO 

GO 

RE 

HO 

PE 

SA 

RA 

JE 

KA 

DO 

PI 

RI 


c 
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REGTRICTE C- 

^ 3. Solve'and recova- all keys: 


5 10 15 


















A 

DR 

DD 

SY 

DA 

RA 

RR 

SB 

YA 

BT 

TY 

AR 

HI 

DB 

TB 

AD 

B 

YY 

YB 

SA 

AA 

HI 

DA 

TD 

HR 

YB 

TD 

RB 

RI 

AI 

HH 

BT 

C 

DD 

lA 

AI 

BB 

HA 

YD 

TH 

YA 

HI 

BA 

YT 

YD 

YY 

BD 

YH 

D 

SD 

DI 

SB 

AA 

ST 

YD 

RH 

SD 

SR 

YR 

DT 

SR 

RA 

RR 

YB 

E 

SA 

BT 

TY 

HR 

AI 

DB 

IB 

AD 

DY 

YB 

SA 

HA 

HI 

DA 

TD 

F 

TS 

DB 

SH 

YH 

DI 

SD 

TT 

TT 

YY 

HH 

ST 

YI 

SB 

AA 

ST 

G 

DD 

AH 

DH 

YT 

RH 

HI 

ID 

AR 

SB 

BA 

RI 

HB 

AI 

HI 

RH 

H 

DB 

SH 

HA 

RI 

DA 

AI 

IB 

YB 

DI 

SI 

DD 

YA 

BB 

YT 

HH 

J 

II 

YH 

TY 

BS 

DD 

YR 

SR 

RI 

HH 

TD 

DT 

TA 

AI 

RY 

ST 

K 

SH 

DH 

AB 

AI 

TI 

YT 

AH 

HY 

AR 

AI 

RH 

DI 

YD 

DD 

YA 

L 

TB 

DT 

HH 

SB 

AA 

DT 

DD 

RH 

YD 

DR 

YB 

DH 

SH 

SR 

DD 

X 

DA 

SI 

RI 

ID 

ST 

BD 

SI 

SD 

TT 

BH 

SH 

RI 

AA 

HI 

BB 

N 

IS 

BI 

HI 

RH 

AY 

DB 

BA 

AI 

DH 

SH 
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25 4. Solve and recover all keys: 

5 10 15 


A 

99 

18 

57 

82 

12 

28 

78 

90 

25 

04 

15 

30 

04 

06 

14 

B 

57 

34 

64 

20 

72 

15 

30 

02 

57 

44 

84 

52 

66 

11 

81 

C 

87 

58 

35 

78 

31 

14 

70 

90 

68 

47 

30 

13 

15 

21 

86 

D 

92 

43 

10 

30 

35 

20 

31 

32 

64 

18 

57 

26 

84 

12 

06 

E 

34 


69 

72 

90 

78 

07 

90 

31 

29 

57 

50 

82 

19 

53 

F 

1 

31 

72 

51 

36 

10 

86 

36 

47 

18 

67 

26 

04 

92 

82 

30 

6 

08 

31 

58 

90 

88 

87 

91 

10 

20 

82 

31 

14 

56 

57 

31 

H 

88 

04 

31 

30 

66 

47 

30 

36 

18 

99 

20 

06 

97 

31 

21 

J 

55 

99 

18 

~20~ 

10 

28 

74 

68 

90 

41 

69 

82 

90 

78 

31 

K 

86 

88 

15 

91 

26 

92 

72 

87 

14 

43 

20 


28 

64 

92 

L 

47 

02 

58 

35 

10 

96 

05 

34 

37 

85 

06 

26 

80 

50 

92 

M 


10 

70 

81 

92 

18 

02 

86 

’49 

47 

07 

82 

94 

06 

69 

N 

15 

21 

90 

56 

10 

40 

01 

68 

90 

15 

35 

57 

52 

32 

60 

P 

47 

64 

36 

71 

06 

55 

00 

68 

78 

45 

5i2 

12 

69 

43 
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25 5. This message is suspected of having an ending similar to Problem 4. Solve 

it and recover all keys: 

5 10 15 


















A 

22 

08 

71 

29 

19 

83 

05 

34 

76 

58 

05 

56 

62 

26 

22 

B 

35 

48 

75 

13 

78 

58 

34 

65 

02 

07 

71 

51 

87 

35 

96 

C 

10 

32 

69 

45 

47 

81 

46 

11 

01 

14 

67 

37 

■75 

79 

35 

D 

30 

53 

29 

37 

46 

60 

19 

30 

94 

66 

49 

68 

88 

57 

98 

E 

84 

93 

30 

86 

28 

90 

51 

04 

53 

03 

84 

76 

58 

31 

57 

F 

42 

12 

86 

49 

36 

79 

54 

28 

09 

38 

24 

41 

86 

63 

79 

G 

08 

28 

67 

68 

66 

94 

22 

63 

71 

66 

83 

56 

05 

07 

58 

H 

95 

60 

19 

62 

26 

48 

23 

59 

40 

38 

15 

67 

43 

92 

42 

J 

62 

77 

43 

79 

54 

69 

38 

65 

16 

82 

10 

96 

67" 

97 

57 

K 

48 

93 

24 

13 

53 

29 

46 

37 

32 

65 

12 

94 

84 

95 

68 

L 

83 

93 

98 

37 

75 

79 

45 

12 

97 

84 

53 

03 

75 

76 

95 

M 

31 

29 

32 

21 

49 

17 

25 

73 

00 

69 

86 

36 

79 

45 

19 

N 

77 

98 

38 

95 

97 

93 

94 

98 

72 

42 

59 

00 

08 

50 

44 

P 

27 

26 

62 

57 

06 

91 

23 
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FREQUENCY DISTRIBUTIONS 
A E I 0 U , 


A 

B 

D 

H 

I 

R 

S 

T 

Y 


Problem 2 


ABDHIRSTY 


512293--1 
33211-13- 
558442-41 
31-582--1 
131-1-1-- 
21-662--1 
35 4 634-51 
12411-133 
465312-43 


Problem 3 


B 2 6 18 7 

C - 5 2 3 1 

D 4 6 1 8 7 

F 2 112- 
G - 3 2 3 - 
J 2 3-92 
K 1 3 6 2 - 
L 2 3-1- 
M - 3 1 4 - 
N 6 1 2 - - 
P 12 3 1- 
R 3 3 1 - - 

S 4 2 1- 

T 12 5 1- 
V 4 2 2 - 



0 1 

2 

3 

4 

5 6 7 8 

9 


0 

1 

2 

3 

4 

5 

6 7 8 

9 

0 

1 1 

3 

_ 

4 

16 2 1 

_ 

0 

2 

1 

1 

2 

1 

3 

12 3 

I 

1 

7 1 

3 

1 

4 

6 - - 6 

1 

1 

2 

1 

3 

2 

1 

1 

11- 

4 

2 

6 3 

- 

- 

- 

2 4-3 

1 

2 

- 

1 

3 

2 

2 

1 

3 13 4 

3 

710 2 

- 

3 

4 4 1- 

_ 

3 

3 

2 

3 

- 

2 

3 

2 4 4 

- 

4 

1 1 

- 

3 

1 

1 - 6 - 

1 

4 

1 

1 

3 

2 

1 

3 

3 13 

3 

5 

2 1 

3 

2 

- 

2 2 7 3 

- 

5 

1 

2 

- 

4 

2 

- 

2 4 4 

2 

6 

1 - 

- 

- 

4 

-215 

4 

6 

2 

- 

4 

2 

- 

3 

3 4 3 

3 

7 

2 1 

4 

_ 

1 

-5 

- 

7 

- 

3 

1 

1 

- 

4 

3 2 1 

6 

8 

1 2 

6 

- 

2 

14 3 3 

- 

8 

- 

1 

1 

3 

4 

- 

4 11 

_ 

9 

9 2 

6 

- 

1 

-11- 

3 

9 

1 

1 

1 

4 4 

4 

2 3 4 

- 


Problem 4 Problem 5 
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MEMORANDUM ON STEREOTYPIC BEGINNINGS AND ENDINGS 
Within the conges of the comparatively limited scope of military messages, stereotypy 
of phraseology is inevitable. Particularly in the beginnings of messages is this limitation 
apparent: thus these positions lend themselves most readily to attack by the cryptanalyst. 
The following list of stereotypes have a high frequency of positional occurrence, and there¬ 
fore are to be shunned by the cryptographer as conscientiously as they are looked for by 
the cryptanalyst. It is to be noted that a stereotypic initial word often may suggest a whole 
oi>ening phrase. For example, if a message begins with the word HEAVY, then it is not 
too unlikely that the opening phrase is "HEAVY ARTILLERY (FIRE, BARRAGE) 
(FALLING, INTERDICTING)...which might be expanded into "HEAVY ARTIL¬ 
LERY FIRE FALLING ON OUR POSITIONS (NORTH, EAST, SOUTH, WEST) OF...” 


BEGINNINGS 


ACKNOWLEDGE 

ADVANCE 

ADVISE 

ARRIVE 

ATTACK 

ATTENTION 

CANCEL 

CITE 

COMMANDING (GENERAL) 

COMMUNICATION (OFFICER) 

CONCENTRATE 

CONFIRM 

CONTINUE 

DEPART (-URE) 

DISCONTINUE 

ENEMY 

EQUIPMENT 

EXPEDITE 

FOLLOWING 

FOR 

FROM 

HEAVY 

HOSTILE 

INFORM (-ATION) 

IN REPLY (TO) (YOUR) 


LOCATION (OF) 

NUMBERS <1,1st, 2, 2nd, etc.) 

ORDERS 

OUR 

PARAPHRASE 
PLEASE 
POSITION 
PREPARE 
PROCEED 
RECEIPT 
RECEIVE 
RECOMMEND 
REFER (.RING) (TO) (YOUR) 
REFERENCE (YOUR) (MESSAGE, RADIO¬ 
GRAM, TELEGRAM) (NUMBER) 
REPEAT 
REPORT 
REQUEST 
REQUIRE 
RERAD 
REURAD 
SEND 
SUPPLY 
VERIFY 
YOUR (S) 


ACKNOWLEDGE 
ADVISE (IMMEDIATELY) 
CONFIRM 
END 

END OF MESSAGE 
IMMEDIATELY 
NUMBERS (1,1st, 2, 2nd, etc.) 


ENDINGS 
PERIOD 
REPLY 
REFERENCE 
REQUESTED 
SIGNED (NAME) 

STOP 

TITLES (MAJ, COL, ETC.) 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 


SUBCOURSE 20-6 
LESSON 6 

CREDIT 

TEXT ASSIGNMENT 

MATERIALS REQUIRED 

SUGGESTIONS 

EXERCISES 

Weight 


Military Cryptanalysis, Part I 
Polygraphic substitution systems: 4- 
square and 2-square matrices 
3 

Text, pars. 41-44, Section IX; attached 
memoranda 

Cross-section paper of }i inch squares 
Review Section VIII, TM 11-485 


4 1. a. What is polyliteral substitution? What is polygraphic substitution? 

4 b. In true digraphic substitution, if REp yields QNc, is it possible for RNp 

to yield AZ,? 

2 c. What is the fundamental purpose of polygraphic substitution? 

10 2. a. Construct a digraphic frequency distribution of the cryptogram below. 

20 b. The following cryptogram is suspected to contain the word INFANTRY. 

Solve it and recover all keys: 

5 10 15 


A 

AF 

SM 

DH 

FG 

SP 

OS 

AB 

TU 

ZF 

OG 

TR 

UH 

IF 

PQ 

SO 

B 

RO 

MA 

CS 

KN 

SM 

KH 

TT 

UF 

HF 

UE 

QM 

OC 

NU 

DC 

EA 

C 

AM 

QM 

AF 

VD 

LK 

BT 

QU 

FC 

NI 

TT 

CG 

MT 

SA 

HH 

PU 

D 

ZR 

KU 

IW 

RH 

DS 

IM 

SW 

AC 

MT 

SP 

OS 

AB 

GN 

KP 

TD 


TT 

TU 

IM 

II 

SN 

SA 

HH 

QM 

SH 

II 

PQ 

RH 

DS 

IM 

SW 

F 

YO 

CC 

UF 

QI 

TR 

MT 

SP 

OS 

AI 

KU 

KU 

IW 

SO 

RO 

MA 

G 

CS 

KN 

YO 

QA 

FC 

CS 

VS 

DH 

LS 

KS 

AC 

QT 

OQ 
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20 3. The enemy is suspected of using a 4-square matrix wherein the plain 

• components are mixed sequences and the cipher components are standard alpha¬ 
bets (I = J) inscribed in straight horizontals. Solve the following ayptogram and 
reconstruct the original matrix: 

5 10 15 


A 

DO 

GV 

XX 

HA 

TP 

PN 

DF 

OW 

FS 

YN 

DP 

YK 

DP 

YK 

WH 

B 

WL 

lA 

NF 

OB 

DE 

GV 

HX 

VC 

OP 

RY 

OP 

DQ 

RY 

WT 

DP 

c 

YK 

DP 

YK 

QZ 

FS 

IX 

GW 

DB 

AF 

HW 

NE 

VO 

YA 

LZ 

CW 

D 

TY 

DQ 

GN 

WN 

NS 

IH 

CA 

VI 

HH 

OF 

WZ 

YN 

WM 

WH 

OG 

E 

EV 

YN 

NL 

NK 

XI 

WH 

WL 

lA 

NF 

OB 

DE 

GV 

FS 

OF 

WH 

F 

NF 

OP 

DQ 

XO 

FA 

WN 

LQ 

DP 

YK 

BP 

IE 

DP 

YK 

SD 

NQ 

G 

DP 

YK 

TP 

PN 

VT 

TF 

BL 

MW 

CW 

IE 

TE 

FS 

CY 

OK 

YD 

H 

OM 

XE 

VT 

FS 

IX 

HB 

IH 

MP 

YN 

LZ 

YN 

NW 

GR 




20 4. Solve the following cryptogram and reconstruct the enciphering matrix. 

It is suspected that this message probably has a stereotypic ending. 

5 10 15 


A 

NK 

KZ 

FQ 

KG 

QD 

RR 

RO 

NK 

MV 

TR 

KE 

HQ 

FZ 

OR 

PE 

B 

NK 

RD 

FW 

IV 

EF 

FF 

XT 

NB 

LZ 

NV 

EU 

RO 

PQ 

DA 

ML 

C 

EU 

KV 

FF 

LL 

FM 

CF 

QP 

El 

RC 

SO 

RS 

BC 

SD 

LN 

CD 

D 

IE 

HG 

TM 

VE 

FP 

QP 

SI 

KZ 

FW 

FP 

NB 

OR 

IZ 

IW 

EF 

E 

FF 

XT 

LW 

NX 

PD 

KK 

KV 

RD 

FP 

OR 

MX 

AR 

PZ 

FW 

ML 

F 

EU 

IN 

FF 

LW 

NC 

LN 

CD 

QP 

SI 

KE 

FR 

HP 

ON 

IM 

HC 

G 

SM 

KZ 

IL 

FN 

FP 

LV 

LQ 

PD 

AS 

FK 







RESTRICTED 


2 



WEE ID:A56886 


RECTRIGTEiy 

20 6. The following two messages were intercepted on the same circuit half an 

hour apart, message "B” being in answer to a request for a repeat. Solve the 
texts, and determine the cause of the cryptographic error involved: 


MESSAGE “A” 

5 10 15 


A 

DS 

ZM 

CM 

GI 

QM 

AB 

VG 

ED 

SU 

XI 

TO 

SQ 

OR 

NR 

SB 

B 

PN 

QO 

HN 

TB 

LL 

QN 

QS 

SI 

CR 

YU 

TQ 

CC 

KG 

AT 

FN 

C 

yf 

VG 

ED 

CG 

NU 

MO 

LL 

NP 

SO 

SB 

NP 

SQ 

OR 

NR 

SB 

D 

PN 

CM 

MB 

RP 

OG 

LL 

YX 

CM 

GI 

QM 

AB 

SO 

NQ 

LZ 

LC 

E 

FD 

YR 

VI 

OR 

SB 
















5 

MESSAGE “B 


10 





15 

A 

OY 

RU 

PU 

KV 

TU 

WO 

IW 

LL 

NR 

EV 

VD 

NB 

BZ 

YZ 

NO 

B 

AS 

TD 

HS 

VO 

DE 

TS 

TY 

NV 

PZ 

SR 

VB 

PM 

FW 

WQ 

XS 

C 

SK 

IW 

LL 

PW 

YR 

CD 

DE 

YC 

ND 

NO 

YC 

NB 

BZ 

YZ 

NO 

D 

AS 

PU 

CO 

UC 

BW 

DE 

SF 

PU 

KV 

TU 

WO 

ND 

YB 

DI 

DM 

E 

XL 

SZ 

IV 

BZ 

NO 
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MEMORANDUM ON THE SOLUTION OF 2-SOUARE MATRICES 

1. If the student reviews paragraph 34 of TM 11-485, he will refresh his memory on 
the enciphering and deciphering processes of the two types of 2-square matrices. In the 
horizontal 2-square matrix illustrated in Fig. 36, the first member of the plaintext digraph 
comes from the same square as the second member of the cipher-text digraph, whereas the 
02p comes from the same square as the 6^ Thus in the digram, THp = SD „; ANp = UO „; REp = 
ERo! M0p = 0Mc. However, the cryptography of the vertical 2-square matrix is analogous 
to that of the 4-square system, in that the 0ip and the 0^0 come from the upper component, 
whereas the 02p and 0^0 are found in the lower component. Thus in Fig. 38, COp = IAc; 
REp = IL,; CAp = CAe; WIp=WIe. 

2. The cryptographic idiosyncracies of 2-square matrices may be exploited by the 
analyst in attacking such systems. In the vertical 2-square, 20% of the possible 625 plain¬ 
text digraphs will be self-enciphered, such as CAp = CAc in the example. In the horizontal 
2-square, 20% of the 625 digraphs will be enciphered by themselves in reversed form, as in 
the example REp=ERe. Therefore if an examination of the cryptogram at hand discloses 
a goodly proportion of cipher digraphs which could well be plaintext digraphs, then one may 
assume that a vertical 2-square has been used. On the other hand, if a large number of 
cipher digraphs could be good plaintext digraphs if the positions of the letters were reversed, 
then the assumption would arise that the cryptogram was produced by a horizontal 2-square 
matrix. Sometimes skeletons of words or even whole phrases are self-evident in the text, 
affording an easy entering wedge into the problem. 

3. During the reconstruction of the squares of the matrix, the student should keep 
clear on his worksheets which letters are in the same row, and which are in the same column. 
It will be found expeditious to draw a dividing line (either horizontal or vertical, depending 
on the type of 2-square involved) on the page to keep the elements of the two squares in¬ 
dependent, recording the values which are in the same row or column, writing down the 
letters as they are assumed until enough values have been established to facilitate recon¬ 
struction of the matrix. In the early stages of this process the student must exercise care 
in recording the letters so that no false relationships are formed; in other words, the values 
should be written down so that they are not in the same row or column with any other 
letters than those with which they are known to be related. This will entail spreading the 
work rather widely over the page. 
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DIGRAPHIC IDIOMORPHS: GENERAL 


-G EN ER 
NE 

-P RO CE 
-S UC CE 
-D ET RA 
-L 
-M 
OB TA 
QU 
RA 
RE MA 
SH 
-T RA 
CR 

PO SI TI 
-A 
-A 
BO 
WI 


AB AB 

AL AL 
ED ED 
ED ED 
ED ED 
IN IN 
IN IN 
IN IN 
IN IN 
IN IN 
IN IN 
IN IN 
IN IN 
IN IN 
IS IS 
ON ON 
RE RE 
SU SU 
TH TH 
TH TH 
TI TI 
TI TI 
VI VI 


G- 

G- 

G- 

G- 

E- 

G- 

G- 

G- 

G- 


EN FO RC ED 

AL 

E- 

E— 

ON 

ON 

D- 


AB — AB 

-M AI NT AI N- 

RE AR GU AR D- 

CH UR CH 

DE Cl DE 

DE CO DE 

DI VI DI NG 

SP EA RH EA D- 

-R ED UC ED 

-S CH ED UL ED 

-B EE NN EE DE D- 

EM BL EM 

AM EN DM EN T- 

CO NT EN TM EN T- 

^ EV EN TE EN 

-S EV EN TE EN TH 

EN TR EN CH 

ER AS ER 


AB — AB 

TH ER EF ER EN CE 
TH ER ES ER VE 
WH ER EV ER 
-C AR EL ES SN ES S- 
GE OR GE 

SC HO OL HO US E- 
-I LL UM IN AT IN G- 
IN CL IN E- 
-F IR IN GL IN E- 
MA IN TA IN 
-I NF AL LI BI LI TY 
-A ME ND ME NT 
SO ME TI ME 
-0 NE NI NE 
NO TK NO WN 
NO WK NO WN 
-A PP 01 NT ME NT 
-C ON TE NT ME NT 

-C OM PR OM IS E- 
-P ON TO ON 
-T HR OU GH OU T- 
-N Off KN Off N- 
PH OS PH OR US 
PO ST PO NE 
TR 00 PS HI PS 

PA RA PH RA SE 

-P RE FE RE NC E- 

REFERENCE- 
-T HE RE FO RE 
-P RE PA RE 
RE TI RE 
RE VE RE NT 
-C RO SS RO AD S- 
CA RE LE SS NE SS 

AT TE MP TE D- 
TH AT TH E- 
-F OR TH ffl TH 

-I NV ES TI GA TI ON 

ES TI MA TI ON 

-D ES TI NA TI ON 

AC TI VI TI ES 

-H UM DR UM 
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AB-AB 


-F 


AM 

AC 

AN 

AL 


BI 

TR 

AR 

Y- 


SO 

ON 

AS 



PT 

AN 

CE 



PL 

AC 

EM 

EN 

T- 

MA 

ST 

ER 



PR 

ET 

ER 



SO 

RI 

ES 



CL 

UD 

IN 

G- 


EC 

TF 

IR 

E- 


RR 

OW 

MO 

RN 

IN G- 

MA 

CA 

NA 

L- 


ER 

ME 

NT 



ER 

VE 

NT 

10 

N- 

IN 

GE 

NT 



DI 

TI 

ON 



RO 

m 

OR 

NI 

NG 

DI 

OG 

RA 

M- 


AS 

SU 

RE 



MA 

TU 

RE 



VE 

PO 

SI 

TI 

ON 

RD 

IC 

TE 

D- 


RM 

AS 

TE 

R- 


RP 

RE 

TE 

R- 


RR 

UP 

TE 

D- 


FI 

CA 

TI 

ON 



AB-AB 



AR 

MO 

RE 

DC 

AR 


EN 

FO 

RC 

EM 

EN 

RE 

EN 

FO 

RC 

EM 

EN 


IN 

DE 

TE 

RM 

IN 


IN 

TE 

RE 

ST 

IN 


IN 

TE 

RF 

ER 

IN 


IN 

TE 

RV 

EN 

IN 

-I 

NC 

OM 

PE 

TE 

NC 

-C 

ON- 

GR 

ES 

SI 

ON 

-D EM 

ON 

ST 

RA 

TI 

ON 

-C 

ON 

SU 

MP 

TI 

ON 


PH 

OT 

OG 

RA 

PH 


TH 

IR 

TE 

EN 

TH 


T- 

TS 

AT E- 


E- 

AL 


AB- 


-C 

-C 

-C 


NS TA LL AT 10 NS 
ON CE NT RA TI ON 
ON FL AG RA TI ON 
ON SI DE RA TI ON 


AB — AB AB 

IlN CL IN IN|G- 
Ma|iN TA IN INlG- 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 


SUBCOURSE 20-6 
LESSON 7 

CREDIT 

TEXT ASSIGNMENT 


Military Cryptanalysis, Part I 
Polygraphic substitution systems: Play¬ 
fair ciphCT systems 
3 

Text, pars. 45-46, Section IX; attached 
memoranda 


MATERIALS REQUIRED Cross-section paper of K inch squares 

SUGGESTIONS Review Section VIII, TM 11-485 

EXERCISES 
Weight 

35 1. What are the characteristics of the normal Playfair cipher which make it 

recognizable? 

20 2. Solve the following and recover the keyword: 


5 


10 


15 


A 

QO 

AP 

QO 

CM 

PQ 

BQ 

HO 

WE 

OB 

DQ 

WE 

LC 

FT 

OF 

TE 

B 

OC 

AO 

OC 

CK 

BX 

CM 

BV 

LF 

LX 

EX 

TW 

SD 

ND 

VL 

VR 

C 

FR 

XV 

AR 

VD 

LZ 

SB 

XV 

FW 

QV 

DL 

BK 

CM 

SB 

XV 

WS 

D 

QO 

PA 

BQ 

TE 

OC 

FR 

BV 

VQ 

QV 

TL 

VQ 

CX 

LY 

FW 

WS 

E 

QO 

PA 

BZ 

RF 

PV 

IV 

VD 

SZ 

TW 

XE 

WE 

OB 

IR 

DC 

PV 

F 

VZ 

SD 

ND 

MD 

FV 

ZD 

MH 

ZD 

VP 

BG 

MH 

DC 

VB 

RO 

CK 

G 

PA 

AP 

MS 

AO 

TW 

XE 

VD 

LZ 

VL 

ZR 

RZ 

LY 

OQ 

RZ 

OR 

H 

CS 

AR 

DC 

MA 

YM 

MS 

BX 

LP 

TK 

TK 

DW 
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20 3. The following cryptogram is suspected to contain the word DIVISION. 

Solve it and recover the original enciphering square. 

5 10 15 

A MP QK KA SZ QK KA HX EH LK YS ND TP CQ OL NP 

B RC AH LM SK ND YG QK DU RF QK EH LK YS ND TP 

C SA OE SY FR QP FE YS MO FD AF RJ RS DU RF RN 

D TP CQ UL LM SK ND UD FM JE HR VN QK UD EC LF 

E AK BH lY QV SM FO SY DY 

20 4. a. Solve the following cr 3 T)togram and recover the original enciphering 

square. It is suspected that this message is signed “WINTHROP COL INF.” 


5 , 10 15 


A 

4L 

65 

4L 

C3 

IV 

PV 

7W 

XV 

ZX 

B1 

DS 

07 

L4 

CW 

4K 

B 

OF 

RT 

4L 

79 

OL 

HR 

YN 

MR 

RM 

DQ 

QV 

9R 

6M 

CX 

4K 

C 

QF 

4N 

4L 

79 

OL 

HR 

OP 

E4 

NR 

QB 

4M 

XS 

WN 

0E 

NU 

D 

GC 

QX 

4K 

0D 

51 

NP 

Z5 

4R 

L4 

VQ 

PF 

HN 

4L 

79 

OL 

E 

HR 

EM 

8X 

41 

ND 

AP 

zi 

4N 

XC 

M4 

RT 

P6 

4M 

5H 

FZ 

F 

C3 

R9 

Q4 

Cl 

2H 

XZ 

48 

10 

L4 

YN 

PQ 

LM 

HR 

T4 

PQ 

G 

BQ 

RM 

D3 














2 b. What is the principal disadvantage of such a system for military 

purposes? 
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20 5. The following message was intercepted and solved by the cryptanalytic 

section at GHQ. The plaintext was found to read: “DIVISION RESERVES 
HAVE REACHED CROSSROADS EIGHT NINE THREE DASH B.” Re¬ 
construct the general system and show the specific key: 


GKATJ AHPOG FBRCQ RBISX CGFLG 
KERED EKOBQ RHKUB RZGKE RIWKU 
KAKUGXKOHKEBFELAKESX 

6. From the solution of three Pla 3 ^air ciphers, the foUowing squares were 
derived. Reconstruct the original squares and show the ke]^ords. 

6 a. YPTGV 

C F A L Z 

Q i U D B 

K X E S N 

R U 0 H W 

6 6, Z P E W L 

Q U G Y S 

A R H B C 

I D V K T 

M F X R 0 

6 c. W Z R T V 

0 P X Y L 

- M U H N E 
A B S I C 

K Q D F G 
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DIGRAPHIC FREQUENCY DISTRIBUTIONS 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 


A 

B 

- 

- 

— 

- 

- 

1 


- 1 

- 

- 

-22-2 
-2 - 

- 

- 

- 2 - 

2 

- 1 

C 

D 

- 

: 

3 - 

: 

- 

: 

— 

- 2 

1 

3 

_1 - 

1 

: 

-1 

1 

:: 

E 

- 

- 


- 

- 

- 



- 

- 


- 

- 

-12 

1 


G 

_ 

_ 


_ 

_ 

_ 

_ 

_ 

_ 

_ 


J. 

_ 

_ 

_ 

H 

- 

- 

- - 

- 

- 

- 

— 

— 

- 

- 

_ 1- 

- 

- 

— 

- 

— 

I 

- 

- 

— 

- 

- 

- 

— 

- - 

- 

- 

-1 

- 

- 

- 1 - 

- 

— 

J 

- 

- 

— 

- 

- 

- 

— 

— 

- 

- 


- 

- 

_ ■- 

- 

— 

K 

- 

- 

— 

- 

- 

- 

— 

— 

- 

- 


- 

- 

— 

- 

— 

L 

- 

- 

1 - 

- 

- 

1 

— 

- 

- 

- 

-1- 

- 

- 

— 

1 

2 2 

M 

1 

- 

- 1 

- 

- 

- 

2 - 

— 

- 

- 


2 

- 

— 

- 

— 

N 

- 

- 

- 2 

- 

- 

- 

— 

— 


- 


- 

- 

— 

- 

— 

0 


2 

3 - 

- 

1 

- 

— 

— 

- 

- 

- 1 

- 

- 

— 

- 

— 

P 

3 

- 

— 

- 

- 

- 

— 

— 

- 

- 

-1- 

- 

- 

- 2 - 

- 

-: 

Q 

- 

- 

— 

- 

- 

- 

— 

— 

- 

- 

- 4 - - 1 

- 

- 

- 2 - 

- 

— 

R 

- 

- 

— 

- 

1 

- 

— 

— 

- 

- 

_ 1- 

- 

- 

— 

- 

- 2 

S 

- 

2 

- 2 

- 

- 

- 



- 

- 


- 

- 

— 

- 

- 1 

U 

_ 

_ 


_ 

_ 

_ 

_ 

_ 

_ 

_ 


_ 

_ 

_ 

_ 

_ 

V 

- 

1 

- 3 

- 

- 

- 

— 

— 

2 

- 

- - 1 2 1 

- 

- 

— 

- 

- 1 

w 

- 

- 

— 

3 

- 

- 

- - 

— 

- 

- 


2 

- 

— 

- 

— 

X 

- 

- 

— 

2 

- 

- 

— 

— 

- 

- 


- 

- 

- 3 - 

- 

— 

Y 

- 

- 

— 

- 

- 

- 

— 

— 

- 

1 


- 

- 

_ - 

- 

— 

Z 

- 

- 

- 2 

- 

- 

- 

— 

— 

- 

- 

-1 

- 

- 

— 

- 

— 


4 

5 710 7 

2 

2 

2 

5 4 4 

8 4 6 9 

5 

1 

116 

5 

2 7 


Problem 2 
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MEMORANDUM ON PLAYFAIR KEYWORD DERIVATION 

1. Reconstruction of the square in Playfair ciphers takes place concurrently with the 
evolution of the plaintejct, once a few correct assumptions are made. However, the square 
that is derived may not necessarily he the original enciphering square: more than likely it 
will be one of the 24 possible cydic permutations of the original square. If the Playfair 
consisted of a keyword-mixed sequence, a permutation of the square will cause no difficulty 
in recovering the original matrix and hence the kes^ord. For example, if the derived 
square is Q T L N 0 then the square P Y R A M 

XZUVW IDSBC 

A.MPYR EFGHK 

BCIDS LNOQT 

HKEFG UVWXZ 

is easily constructed because of the tell-tale letters UVWXZ ocemring in a row of the de¬ 
rivative square. But when the Pla 3 ^air square consists of a transposition-mixed sequence, 
then a different procedure must be adopted. 

2. As an example, let us take the transposition matrix 

58614527 from which A F T D K is the original square. Using the methods illus- 
PYRAMIDS WIHVM 

BCEFGHKL GUPBN 

NOQTUVWX . ZREQS 
Z L X Y C 0 

trated in a previous memorandum ("Alphabet reconstruction and keyword derivation”), 
the columns IDS will afford rapid recovery of the ke 3 nvord. But if instead of the original 
H K L 
V W X 

square we had one of its permutations such as Q S Z R E , then the columns F V 0 are 

COLXY TML 

DRAFT VWX 

VMWIH 
B N G U P 

without significance; therefore the procedure above is inapplicable without a slight modifica¬ 
tion. 

3. Since it will be noted that a permutation of the rows will not affect the procedure of 
keyword recovery, then we construct a 9 x 5 rectangle QSZREQSZR which contains 

COLXYCOLX 
DKAFTDKAF 
VMWIHVMWI ' 
BNGUPBNGU 

the five squares of the successive permutations of the columns. * A 5 x 5 cut-out square will 
be found convenient in testing each permutation in turn. Affirmative results will be obtained 
when the correct permutation is reached, which in this case is the third square in the rectangle, 
namely 

ZREQS 
L X Y C 0 
A F T D K 
WIHVM 
GUPBN 
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DIGRAPHIC IDIOMORPHS: PLAYFAIR 


AB BA 



SC 

AB 

BA RD 





SH EL 

LE 

D- 




AF 

FA BL 

E- 




-H EM 

ME 

DI 

N- 



AF 

FA IR 





ST EM 

ME 

D- 



-B 

AG 

GA GE 





ST EP 

PE 

b- 


-H 

AW 

AI 

lA N- 





AV ER 

RE 

D- 




AL 

LA RE 

AS 



CO 

NF ER 

RE 

D- 



-B 

AL 

LA ST 




-I 

NT ER 

RE 

D- 



-F 

AL 

LA CY 




-R 

EF ER 

RE 

D- 


IN 

ST 

AL 

LA TI 

ON 

S- 



ES 

SE 

NC 

E- 

-P 

AR 

AL 

LA X- 





ES 

SE 

NT 

lA L- 



AP 

PA RA 

TU 

s- 


AD 

DR ES 

SE 

S- 




AP 

PA RE 

L- 



-C OM 

PR ES 

SE 

D- 




AP 

PA RE 

NT 



CO 

NF ES 

SE 

D- 




AP 

PA RE 

NT 

LY 


IM 

PR ES 

SE 

D- 




AR 

RA NG 

E — 




-L ES 

SE 

N- 




AR 

RA y- 





-M ES 

SE 

NG 

ER 


-B 

AR 

RA CK 

s- 




PR ES 

SE 

D- 



-B 

AR 

RA GE 




PR 

OF ES 

SE 

D- 


—E 

MB 

AR 

RA SX 

SE 

D- 


-P RO 

GR ES 

SE 

D- 



-N 

AR 

RA TI 

ON 



-S 

TR ES 

SE 

D— 




AS 

SA IL 

AN 

T- 


-S 

TR ES 

SE 

s- 




AS 

SA UL 

T- 




-V ES 

SE 

L- 


-A 

MB 

AS 

SA DO 

R- 



WI 

TN ES 

SE 

S- 


-I 

MP 

AS 

SA BL 

E— 




AB ET 

TE 

D- 



-M 

AS 

SA CR 

E- 



-C IG 

AR ET 

TE 

S— 



-P 

AS 

SA GE 





-B ET 

TE 

R- 




AT 

TA CH 





-L ET 

TE 

R- 




AT 

TA CK 




-E 

IG HT 

TH 

RE 

E- 



AT 

TA IN 





-R IB 

BI 

NG 



-B 

AT 

TA LI 

ON 



FO 

RB ID 

DI 

NG 



-R 

AT 

TA N- 





-D IF 

FI 

CU 

LT 



BO 

OB YT 

RA 

P- 



-B IL 

LI 

ON 



IN 

DE 

ED 





-F IL 

LI 

NG 



-W 

EB 

BE D- 





-K IL 

LI 

NG 




EF 

FE CT 





-M IL 

LI 

ME 

TE R- 



EF 

FE CT 

IV 

E- 



-M IL 

LI 

NG 


CO 

MP 

EL 

LE D- 





-M IL 

LI 

ON 


-E 

XC 

EL 

LE NC 

E- 




SH IL 

LI 

NG 


-E 

XC 

EL 

LE NT 





SP IL 

LI 

NG 


-E 

XP 

EL 

LE D- 





-T IL 

LI 

NG 


-I 

MP 

EL 

LE D- 





-W IL 

LI 

AM 



-P 

EL 

LE T- 





-W IL 

LI 

NG 


PR 

OP 

EL 

LE D- 





IM 

MI 

GR 

AN T- 

-R 

EP 

EL 

LE D- 





IM 

MI 

GR 

AT 10 N- 
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AB BA 

IM MI NE NT 
SW IM MI NG 
-B EG IN NI NG 
SP IN NI NG 
-W IN NI NG 
CL IP PI NG 
SH IP PI NG 
-S TR IP PI NG 

IR RI GA TI ON 
-M IS SI NG 
-M IS SI ON 
-A DM IS SI ON 
EM IS SI ON 
-H IS SI NG 
PE RM IS SI ON 

TR AN SM IS SI ON 

EM IT TI NG 
-F IT TI NG 
-S PL IT TI NG 

PE RM IT TI NG 

-A FT ER NO ON 

FO RE NO ON 

NO ON TI ME 
-F OL LO W- 
-H OL LO W- 
-C OM MO N- 
-C OM MO TI ON 
PO SI TI ON NO RT HO F- 
-R EC ON NO IT ER 

OP PO RT UN E- 
OP PO RT UN IT Y- 
OP PO SE 
OP PO SI TE 
OP PO SI TI ON 
-C OR RO BO RA TE 
-C OR RO DE 
-T OM OR RO W- 
-B OT TO M- 
-C OT TO N- 
CA RE ER 
-S UC CU MB ED 
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t 



AB — — BA 

DE BA RK ED 
DE CL AR ED 
DE FE ND ED 
DE HA ND ED 
DE PA RT ED 
DE PL OY ED 
DE PO RT ED 
DE SE RT ED 
DE TA CH ED 
PR EC ED EN CE 
EM PL OY ME NT 
ENTRAINED- 
MEASUREMENT- 
NE GL IG EN CE 
NO TA TI ON 
PA RA GR AP H- 
RE CE IV ER 
RE CO RD ER 
RE GI ST ER 
RE PE AT ER 
RE PO RT ER 
RE VO LV ER 
-P RO JE CT OR 
AS SE MB LI ES 


AB ^-BA 

DE SE CR AT ED 
DE SI GN AT ED 
DE SP AT CH ED 
ENEMYPLANES- 
-D ET ER 10 RA TE 
-S EV EN TY FI VE 
IR RE GU LA RI TY 
NO MI NA TI ON 
SU SP IC 10 US 


AB-BA 

DE HO NS TR AT EDI 
NO TI FI CA TI ON I 


c 


3 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 


SUBCOURSE 20-6 
LESSON 8 

CREDIT 

TEXT ASSIGNMENT 

MATERIALS REQUIRED 

SUGGESTIONS 

EXUliGISES 

Weight 


Military Cryptanalysis, Part I 
Polygraphic substitution: quadricular 
tables 
3 

Text, Section IX 

Cross-section paper of K inch squares * 
Review Section VII, TM 11-485 


30 1. The following cryptogram is suspected to contain the word RECON¬ 

NAISSANCE. Solve the text, and reconstruct the enciphering diagram: 


5 10 15 


A 

SA 

CJ 

JY 

RO 

HT 

KP 

LP 

DO 

CV 

PS 


PE 

GN 

RP 

SP 

B 

FP 

LU 

QT 

LW 

PR 

CJ 

KL 

RN 

QE 

RO 

CV 

HF 

SE 

LZ 

QZ 

C 

RR 

AO 

TH 

SQ 

PG 

TL 

GL 

NR 

QS 

UZ 

KK 

KK 

JE 

MV 

NL 

D 

LU 

AR 

QE 

SA 

UW 

KK 

LP 

SL 

AP 

PZ 

QV 

KK 

PB 

CJ 

JY 

e' 

RL 

CJ 

HA 

CO 

AR 

BH 

LL 

JK 

QT 

RP 

AS 

SL 

RP 

SL 

NL 

F 

QJ 

QT 

AJ 

NL 

IG 

NR 

WX 

AI 

HI 

YD 

KK 

JE 

CP 

YO 

SP 

G 

KO 

FB 

QT 

QP 

YP 

NZ 

SO 

AM 

DZ 

KR 

FP 

SX 

PK 

FJ 

PR 

H 

OE 

AK 

CE 

AS 

LP 

DO 

PB 

SI 

AX 

SX 

PB 

LP 

HT 

WX 

RF 

J 

GZ 

QT 

LW 

PR 

CJ 

JY 

AK 

HT 

JY 

AA 

NN 

SX 

CB 

RO 

WE 

K 

SA 

RD 

LL 

ML 

AX 

AF 

YU 

NC 

PK 

MS 

NE 

QJ 

QT 

AJ 
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35 2. This cryptogram is suspected of having a beginning similar to that of 

Problem 1. Solve the text, and reconstruct the enciphering diagram: 



1 

2 

3 

4 

5 

6 

7 

00 

9 

10 

A 

003 

315 

097 

114 

347 

261 

067 

217 

314 

241 

B 

195 

062 

350 

115 

006 

451 

062 

141 

072 

472 

C 

189 

192 

018 

400 

189 

067 

315 

097 

530 

403 

D 

115 

393 

262 

609 

192 

356 

115 

186 

122 

467 

E 

212 

071 

074 

237 

235 

114 

416 

115 

393 

271 

F 

055 

293 

186 

552 

009 

062 

471 

141 

150 

193 

G 

186 

516 

184 

266 

274 

470 

002 

238 

053 

186 

H 

141 

072 

236 

516 

189 

004 

195 

191 

479 

067 

J 

008 

397 

080 

137 

105 

189 

391 

262 

343 

408 

K 

133 

273 

071 

084 

274 

400 

367 

223 

403 

186 

L 

211 

524 

008 

292 

on 

122 

393 

284 
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FREQUENCY DISTRIBUTIONS 


I 


_ _ g^gg 

,ggggg-.gggg = 


ABCDEFGHIJKLMNOPQRSTUVWXYZ « = 


= ^ $ ggg^gggg^=^== 

gg^:=:g$=5^^ggg--.ggg-^ggg^g^ggg 

A B C D E F G H IJKLMNOPQRSTUVWXYZ ^=1090 

E(«p)=1471 E(0O“849 


g$ g gi: $gg ^ ^ 

$gggg>.gg^ggg^g==$$g$g==. $ 

ABCDEFGHIJKLMNOPQRSTUVWXYZ <^»1094 


" "g --gg^^^g g 

l$g$g^gg igggigg^g^ g ^g 

ABCDEFGHIJKLMNOPQRSTUVWXYZ *-981 


g ^ g §g g =5 g § ^ $ g $ $ g $ g g = g g g g 

0*,: . ABCDEFGHIJKLMNOPQRSTUVWXYZ *=794 

E(*p)=1207 E(*,)=696 
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C. RE S TRICTED 

EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 

SUBCOURSE 20-6 Military Cryptanalysis, Part I 

LESSON 9 Miscellaneous monoalphabetic substitu¬ 

tion systems 

CREDIT 3 

TEXT ASSIGNMENT Text, Section X 

MATERIALS REQUIRED Cross-section paper of inch squares 

SUGGESTIONS Read appended Partial Analysis Sheets 

EXERCISES 

Weight 

2 1. o. What characters are most used in practical cryptography today? 

2 b. What is the usual preliminary procedure in solving cryptograms in¬ 

volving symbols? 

4 c. In monoalphabetic substitution with variants, what character are 

most commonly used? Why? 

2 2. What is the primary purpose of an analytical key? 

26 8. Solve the following cryptogram, and recover all keys: 


5 10 15 20 25 



B YUQAI AUMQM UWIZU VOJFH GUFMD 


C GQYKQ LLSUI YKCGS WUFQU UQKCF 

D IWHQK OGSWI YJYOY SKXFQ lADQB 

E YKJYS VCLLC SSHJW YMJYS XWYKB 

F JUKKU PTPWI lUQHK XHYKB JYCOF 

G YQENV QICUY BIRRW PIYYN PSWJE 

H PMIOP UQARH KYYQC GWPGE PGAEL 

J SVTFE LTKBT DXVSX SRMYF QXTSH 

K DTTDY CFXFQ HUSGT GUDXC HSBSO 

L WLHQQ NZHKF JHKIU SWWAL HSINW 

M UQQWU SKQSI UMHIT UIZWH HPHffU 


€ 


1 
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20 4. Below is an intercepted message which is suspected to begin with the 

words “FIFTH DIVISION.” Solve it and recova- aU keys: 


6 7 2 6 7 

8 6 5 5 5 

7 2 

8 7 2 

8 5 2 3 7 

7 2 8 5 7 

6 3 8 7 2 

7 7 6 8 4 

7 8 

2 7 7 

8 6 3 7 8 

3 8 5 2 8 

6 2 3 7 7 

8 5 8 6 3 

7 8 

0 5 8 

8 6 2 5 9 

5 9 15 8 

5 6 6 6 0 

5 8 5 8 0 

6 8 

16 7 

0 5 9 5 9 

2 7 7 6 8 

5 9 3 8 8 







20 5. This message below is suspected to contain the same plain text as Prob¬ 

lem 4. Reconstruct the general system and recover all keys: 


3 5 5 9 1 

7 7 7 7 7 

2 9 8 7 2 

9 7 6 4 0 

0 2 2 3 2 

7 4 9 2 3 

4 9 7 6 6 

3 0 6 6 3 


5 9 2 2 8 

8 4 3 3 0 

5 8 7 0 0 

0 2 3 0 0 

7 6 8 4 9 

0 0 10 2 

8 3 3 3 0 

3 0 4 4 4 


8 6 6 0 0 

1 0 4 3 5 

2 9 3 8 8 

3 18 5 8 

9 13 0 0 

4 4 0 9 2 

7 7 5 1 2 

6 0 12 2 


2 4 6 3 5 

5 5 3 9 9 

7 5 0 0 8 

0 6 9 5 8 

1 4 0 9 0 

9 110 0 

2 4 7 8 0 

118 9 8 


7 8 8 8 1 

6 6 6 1 1 

0 7 10 6 

9 7 4 4 2 

6 8 6 7 8 

5 5 7 2 0 

11110 
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25 6. The enemy is using a system incorporating a 10 x 10 bipartite square 

consisting of lett^, digits and syllables. The row and colmnn coordinates are 
invariable, but a different internal chart is used each day. The chart for 16 Decem¬ 
ber was reconstructed and found to be based on the keyword PYRAMIDS as 
follows: 



0 

1 

2 

3 

4 

5 

6 

7 

8 

9 

0 

P 

Y 

R 

RA 

RE 

RED 

RES 

RI 

RO 

A 

1 

1 

AL 

AN 

AND 

AR 

ARE 

AS 

AT 

ATE 

ATI 

2 

ii 

ME 

I 

9 

IN 

ING 

ION 

IS 

IT 

IVE 

3 

D 

4 

DA 

DE 

S 

SE 

SH 

ST 

STO 

B 

4 

2 

BE 

C 

3 

CA 

CE 

CO 

COM 

E 

5 

5 

EA 

ED 

EN 

ENT 

ER 

ERE 

ERS 

ES 

EST 

F 

6 

6 

G 

7 

H 

8 

HAS 

HE 

J 

0 

K 

7 

L 

LA 

LE 

N 

ND 

NE 

NT 

0 

OF 

ON 

8 

OR 

OU 

Q 

T 

TE 

TED 

TER 

TH 

THE 

THI 

9 

THR 

TI 

TO 

U 

V 

VE 

W 

WE 

X 

Z 


The next day the following cryptogram, suspected to contain the word CROSS¬ 
ROADS, was intercepted. Solve the text, reconstruct the chart for the day, and 
determine the specific key: 

5 10 15 


A 

20 

88 

50 

58 

95 

63 

62 

30 

69 

69 

94 

15 

58 

92 

07 

B 

84 

73 

60 

35 

77 

95 

61 

38 

78 

30 

50 

66 

94 

15 

44 

C 

84 

62 

12 

12 

20 

38 

31 

42 

67 

67 

93 

52 

01 

83 

10 

D 

32 

02 

79 

10 

36 

84 

72 

94 

44 

68 

79 

54 

78 

69 

50 

E 

58 

95 

58 

79 

62 

14 

30 

50 

71 

94 

35 

87 

79 

97 

58 

F 

02 

02 

10 

78 

47 

22 

97 

58 

88 

09 

84 

53 

03 

01 

93 

G 

44 

78 

79 

79 

78 

30 

50 

79 

57 

55 

59 

54 

08 

54 

94 

H 

72 

89 

72 

60 

82 

72 

94 

44 

92 

07 

79 

82 

05 

10 

79 

J 

94 

10 

10 

02 

68 

28 

97 

58 

02 

02 

43 

69 

05 

96 

50 

K 

93 

50 

58 

95 

63 

58 

07 

11 

21 

50 

71 

94 

35 

84 

27 

L 

30 

54 

87 

50 

35 

68 











RESTRICTED 




I^F ID:A56886 


RESTRIOTB^ 


PARTIAL ANALYSIS SHEETS 
LESSON 9, MILITARY CRYPTANALYSIS, PART I 


Problem 3 

In taking a uniliteral frequency distribution of this cryptogram, it was observed that 
the positions of the peaks and troughs of the distribution seemed to change during the 
compilation. The over-all distribution is 

8 7 9 6 6 12 10 20 19 11 18 9 9 5 6 9 21 4 22 10 24 5 19 8 21 3 N=300 
ABCDEF G H I J KLMNOPQRS T UVWXYZ 
^=4136 E(«p)=5983 E(^,)=3363 

If the cryptogram is divided into two 150-letter sections, then the distributions are as follows: 

5 4 52 1 7 5 810 9 12 5 6 1 4 210-102142 9 3131 

1. ABCDEFGHIJKLMNOPQRSTUVffXYZ « = 1144 

3344555 12 92543427 11 4 12 8 10 3 10 582 

2. ABCDEFGHIJKLMNOPQRSTUVWXYZ0=97O 

E(^p) = 1520 E(0r)=868 

When the message is divided into three 100-letter sections, then 



5 2 

2 

2 1 

6 5 5 

8 

4 

6 3 5 1 3 

-9-6 

1 11 1 

6 

16 1 

1. 

A B 

C 

D E 

F G H 

I 

J 

K L M N 0 

P Q R S 

T U V 

W 

X Y Z 0= 498 


2 3 

5 

- 4 

13 4 

6 

6 

732228535 

15 2 

6 

213- 

2. 

A B 

C 

D E F G H 

I 

J 

K L M N 0 

P Q R S 

T U V 

W 

X Y Z 0= 484 


1 2 

2 

4 1 

5 2 11 5 

1 

4 3 2 2 1 

1 7 111 8 8 2 

7 

5 2 2 

3. 

A B 

C 

D E 

.F G H 

I 

J 

K L M N 0 

P Q R S 

T U V 

W 

X Y Z 0= 522 


E(</.p)=660 E(0O“381 


When divided into four 75-letter sections, the distributions are 

412115445343511-6-41 11 14-31 

1. ABCDEFGHIJKLMN0PQRSTUVWXYZ«=293 

1331-21456821-324-613153 10- 

2. ABCDEFGHIJKLMNOPQRSTUVWXYZ,^=306 

2221523241222216545423337- 

3. ABCDEFGHIJKLMN0PQRSTUVWXYZ«=212 

1123-32 10 513212116-748-7212 

4. ABCDEFGHIJKLMN0PQRSTUVWXYZ,^=322 

E(<^p)=370 E(^,)=212 
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Upon dividing the text into five 60-letter sections, the distributions are 



4 1 

_ 

1 

1 

3 

3 

4 

5 

3 

2 3 

5 

1 

1 

- 4 

- 

3 

1 

8 

1 

3 

- 

2 

1 

1. 

A 6 

C 

D 

E 

F 

6 

H 

I 

J 

K L 

li 

N 

0 

p Q 

R 

S 

T 

U 

V 

W 

X 

y 

Z«= 180 


1 1 

4 

1 

_ 

3 

2 

2 

3 

4 

5 2 

1 

- 

2 

- 5 

_ 

7 

- 

3 

1 

4 

1 

8 

_ 

2. 

A B 

C 

D 

E 

F 

G 

H 

I 

J 

K L 

M 

N 

0 

p Q 

R 

S 

T 

U 

V 

W 

X 

y 

Z 0= 200 


- 3 

2 

_ 

2 

1 

_ 

2 

6 

3 

5 - 

1 

2 

2 

6 3 

2 

1 

1 

4 

1 

4 

2 
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_ 

3. 

A B 

C D 

E 

F 

G 

H 

I 

J 

K L 

M 

N 

0 

p Q 

R 

S 

T 

U 

V 

W 

X 

y 

Z «= 178 


2 1 

2 

3 

3 

4 

4 

3 

_ 

- 

2 2 

1 

_ 

_ 

2 4 

2 

5 

7 

2 

2 

1 

4 

4 

_ 

4. 

A B 

C D 

E 

F 

G 

H 

I 

J 

K L 

M 

N 

0 

P Q 

R 

S 

T 

U 

V 

W 

X 

y 

Z 156 


1 1 

1 

1 

_ 

1 

1 

9 

5 

1 

3 2 

1 

2 

1 

1 5 

- 

6 

1 

7 

_ 

7 

1 

_ 

2 

6 . ^ 

A B 

C 

D 

E 

F 

G 

H 

I 

J 

K L 

M 

N 

0 P Q 

R 

S 

T 

U 

V 

W 

X 

y 

Z «= 238 







E(^p) = 

236 


E(^0=136 










Finally, upon dividing tbe cryptogram into six 60-letter sections, the distributions are 














1. 

A B 

C 

D 

E F 

Ghijklmn 

0 

PQRSTUVW 

X 

Y Z 4= 123 










? ^ ^ ^ 


g 

2. 

A B 

C 

D 

E 

F 

G H I J K L M 

N 

0 

PQRSTUVW 

X 

Y Z 142 










^ ^ ^ $ 


1 

3. 

A B 

c 

D 

E 

F 

G H I J K L H 

N 

0 

PQRSTUVW 

X 

Y Z 0= 138 












i 

4. 

A B 

c 

D 

E 

F 

G H I J K L M 

N 

0 

PQRSTUVW 

X 

y Z 122 







5: $ ^ ^ ^ 




g 


5. 

A B 

c 

D 

E 

F 

G H I J K L M 

N 

0 

PQRSTUVW 

X 

Y Z «= 148 







^ g ^ ^ ^ 



i 



6. 

A B 

c 

D 

E F 

GHIJKLMN 

0 

PQRSTUVW 

X 

Y Z «= 192 







E(«p)=163 

E(«,)=94 




This last set of distributions gives the most satisfactory results, both as regards the 
^test ortd also the expected number of blanks (cf. chart on page 25 of Text). From these 
several sets of distributions we were trying to determine the first two or three sections of the 
tert that were monoalphabetically enciphered. The division not only seems to be approx¬ 
imately 50 letters, but it also appears that practically all the sections are of equal length. 
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None 

Cross-section paper of K inch squares 
None 


SUBCOURSE 20-6 
EXAMINATION 
CREDIT 

TEXT ASSIGNMENT 
MATERUIB REQUIRED 
SUGGESTIONS 
EXERCISES 
Weight 

Until now the problems of each lesson have followed very closely the order of subject 
matter in the text, so that the student knew fairly well what t3T?es of systems were involved. 
This examination is designed to test the student’s power of obso^tion and logic in determin¬ 
ing the general cryptographic system. AH that is required in the five problems below is the 
determination of the general system, together with tie reasons for the particular classifica¬ 
tion. Solution of the message texts is not mandatory, but strongly recommended: recovery 
of the plaintexts and specific keys certainly would furnish the student with irrefutable proof 
of the validity of his hypotiieses. 


20 


1. LWHPC XBVLW HVKZJ PBPGR BXHSL 

QKRHV FRLXB TCSBP KSBZK RCNBP 

FWHPD WHVGT BPDSB NDQKW FTBVF 

QFRHR.DZDSH PDQKZ BXGVH NLRFX 

HQCZK SBVJQ MRHXB SLQBR FWJSB 

TKZHW MSBNL SBQBX KSDTH TMNHP 

CTBPH VDSJV DWHVH NLQHP CQCRB 

RLWKR HVFXF RBNCS BPJPH VDZFZ 

WBZFS BWBPL XXXXX 


B V L W C 
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20 2. E M U R B W P Z L S 

QTION IYBHY 
ODCXS OUDIY 
QTION OBOPZ 
DTENR TBNTA 
MEGEB DFGNS 
SKSPE VLDEG 
RETAK PH TIM 

20 3. GHUIPGJHNI 

v RQSAJ OOQRS 
JFKIH GSANY 
OQNJS NUYEF 
FFHON QUPOQ 
OWOJT EJWNQ 
ANNKZ XVUKR 
UKRRE MWKIK 
GWQLQ UXVVX 


ERMWU ROBOP UWBWB 
VMIWB EGOPS CDVCC 
MCYXD YHSOU SMONB 
DNOIL LBERO RTREM 
KBCOO BOBEZ SKZZS 
HRLIX SESVR LESUU 
BWDMT ZTION SIVME 
BHHOH IZUDM OEKHP 

MBSPR lUSNS SHPGB 
SIPQS MHVJI PQIVV 
PTKKD YJKQX ZVNPR 
ENPZV NPROQ QTKLN 
HUQTV OTNDO JTKLP 
EKJAE lOUTI QQGTB 
EMMQR RTEII KVPXV 
VPXVU DAEIP RSQII 
VUATG WQQVP 
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4. These two messi^es were intercepted on the same circuit diuing a morning 
offensive. 


Message "A” 


iELPUR PSBOK YBDGY 

ROKFI NPXVP EWHLX 

Y Y Z C X 


YNCNP VXHCJ 
KWYXQ BVYDB 


Message “B” 


RBVYW BYYZC THEEB MMEZI 
SYXCK NNBYM SXQDY AEPCX 


A B X H 


W 


S W W S N 
V D Z F D 
I H Y X M 
H N D K D 
A L D W K 
U X I Y V 
P M B 0 0 
B W I N W 
N G D N I 
Z G Q D F 


S D W P N 
Q Y I N B 
0 U P W N 
X D A U B 
X U B I Z 
I 0 E X F 
B A D N W 
A V Z 0 X 
F T R W I 


X D F.Q F 
P G P P G 
Y T V A P 
0 D F F D 
Z P P G I 
Q W P W I 
T B B T A 
F F Y N G 
A U P R R 


D S C D F 
L A T N N 
U G 0 B Z 
I N W T W 
N A E A R 
Q D A R 0 
G B Z P H 
D Q 0 Z H 
P V S 0 N 


A W K D H 
T Q R T S 
R Z F Q I 
U P G B 0 
Z A U M U 
Z F Y H I 
W S Q R 0 
Y X Z Z X 
M B G S P 
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